What this site records about you, and what it doesn't.

What the site processes

• Visitor statistics

  I measure visits with Umami, open-source software running on my own server in Germany. The tracker and the collection endpoint sit on this domain itself, so no visitor data goes to Google Analytics or any other company. No cookies are set.

  Umami records which pages are viewed, which site you came from, your language, screen size, browser, operating system and type of device, how fast the page loads, and whether you click a few marked buttons, such as the one for an intro call. Your IP address is not stored: the country is derived from it, and unique visitors are counted through a hash with a salt that changes periodically, so a visit cannot be linked to you over a longer period. If Do Not Track is on in your browser, the site measures nothing.

  Legal basisLegitimate interest: knowing what gets read and where the site can improve.

• Session recordings and heatmaps

  Umami also records how the site is used: clicks, scrolling, mouse movement and the structure of the page. That shows me where visitors get stuck, and a heatmap shows where on a page people click.

  Whatever you type into a form is masked in the recording, and parts that show personal data, such as the confirmation of an appointment, are not recorded. A recording lasts ten minutes at most, stays on the same server and is deleted automatically after 30 days. With Do Not Track on, nothing is recorded.

  Legal basisLegitimate interest: improving the site based on how it is actually used.

• Booking an intro call or demo

  If you book a call through the calendar on this site, it asks for your name, your email address and, if you like, what you want to discuss. The appointment then goes into a separate calendar in my Google account, with you as the guest. Google sends you the invitation and creates the Google Meet link. Through Resend, a service for sending email, you receive a confirmation with a link to cancel, and I receive a notification with the same details.

  There is no separate database: the appointment exists only in that calendar and in the two emails. If you cancel through the link, the site removes the appointment from the calendar and Google sends the cancellation. I keep the details for as long as the call and its follow-up need them; if you want them deleted sooner, email me. Google and Resend are American services, so this data may also be processed outside the European Economic Area.

  Legal basisYour request for a call: without these details the appointment cannot be made.

• A callback request

  On the DocumentChat pages you can ask me to call you back. Your name, your phone number and the time you prefer are then sent to me as an email through Resend. The site stores them nowhere else.

  Legal basisYour request to be called back.

• The Cortex mailing list

  On the page about Cortex (in Dutch) you can leave your email address for the series. That address goes to MailerLite, a European newsletter service, and only becomes active once you confirm it through the confirmation email. You can unsubscribe through the link at the bottom of every email.

  Legal basisConsent, which you confirm through the confirmation email and can withdraw at any time.

• Contact by email, chat or LinkedIn

  If you email me, or send a message through WhatsApp, Signal, Telegram or LinkedIn, I use your details only to reply. Such a message travels through the service you choose, and that service's own privacy policy applies to it.

  Legal basisLegitimate interest: answering your message.

• Hosting and security

  The site runs on my own server at Hetzner in Germany. Traffic passes through Cloudflare, which secures the connection and processes technical data such as your IP address to do so. To prevent misuse of the calendar, the server counts per IP address how many appointments are made within an hour; that count exists only in working memory and is stored nowhere. The site sets no cookies of its own and loads no advertising or social media trackers, and the fonts come from the site's own server.

  Legal basisLegitimate interest: a secure and reachable site.

• Leonine Retreat

  The concept site Leonine Retreat at stiekema.dev/leonine-retreat runs on the same server and falls under this statement. It has the same statistics and recordings as described above, with a separate measurement. Your language choice on that site is kept in your browser's storage and stays on your own device.

  Legal basisLegitimate interest, as with the statistics.

Your rights