Privacy
What this site records about your visit, why, for how long, and how to ask me about it.
Last updated: 19 October 2026.
Who I am#
This is my personal, non-commercial site. I’m Zoltán Nagy, a private individual, and I’m responsible for the data described here (the controller, in GDPR terms). Write to me at privacy@nzoli.com.
The short version#
No cookies, no ads, no analytics service, no third-party trackers, and I don’t sell or share anything. Fonts, scripts, images and diagrams all come from nzoli.com. What I do keep is the web server’s log of requests, plus figures I work out from it.
What the server records#
The site runs on my own small server at home, in Hungary. Like any web server it notes each request it answers:
- your IP address and your browser’s user agent (browser, version and operating system);
- the time, the page or file asked for and how the server answered (status, size, how long it took);
- the referrer, meaning the page that linked you here, if your browser sends it;
- Cloudflare’s id for the request.
From the IP address the server looks up an approximate location (country and city) and your network (your internet provider or hosting company), using a local copy of the free DB-IP Lite database. Nothing is sent to DB-IP.
The main log leaves out query strings (the part of an address after ?) and never records cookies or login headers. It’s kept for 30 days on the server. The server’s standard access log, which does include query strings, and its error log are kept for 14 days.
What I make from it#
A private dashboard, which only I can open, from my own network, shows how many people read which posts and where they came from: country, network, device, browser and referrer, but no IP addresses. Bots and scanners are filtered out first.
Behind it are figures kept for 13 months: pages read, referrers, country, city, network, device and browser. They hold no IP addresses. Each visitor gets a pseudonymous id instead, a keyed hash of the IP address. The key stays on my server, isn’t backed up, and is replaced every 30 days, so after that an old id can’t be traced back to an IP address.
Page speed#
When you leave a page or switch tabs, your browser sends one small request back to nzoli.com with how fast the page loaded: the page’s path, how you arrived (a click, a reload, the back button), timings such as how long until the first text appeared, and short names of the page elements involved (like main > h1). It sets no cookie, stores nothing in your browser and carries no identifier. That request is logged like any other for 30 days; the speed figures are kept for 13 months, without IP addresses or ids.
Your browser#
If you use the light/dark switch, your choice is saved in your browser’s local storage. It never leaves your device.
Cloudflare#
All traffic passes through Cloudflare, which protects the site and delivers it to you. Cloudflare sees every request, including your IP address, and processes it on my behalf. It also asks your browser to report failed connections to it (Network Error Logging), which go to Cloudflare, not to me. Cloudflare is a US company; transfers to the US rely on the EU–US Data Privacy Framework, under which it is certified.
Why, and on what basis#
I keep these records to run the site, keep it secure, deal with abuse, fix problems and see which posts get read. The legal basis is my legitimate interest in doing that (GDPR Article 6(1)(f)). Only I have access, and the data goes to no one else apart from Cloudflare as described.
Your rights#
You can ask me for a copy of the data about you, and to correct or delete it, restrict it, or stop using it (to object). Email privacy@nzoli.com. I don’t know who you are, so I’ll need your IP address and roughly when you visited to find your requests.
If you think I’ve handled your data wrongly, you can complain to the Hungarian data protection authority, NAIH, or to the authority where you live.