Who is responsible
This is a personal website run by me, Adnan Bukvic, in Sweden. I am the data controller under the General Data Protection Regulation (GDPR). For any question about this policy, contact me at adnan@aridan.net.
Summary
This website does not use cookies, analytics, advertising networks or tracking pixels. It has no user accounts, sign-ups or forms. Personal data is never sold or shared for marketing purposes.
Hosting
The site is hosted on Cloudflare Pages. To deliver the site and protect it from attacks, Cloudflare processes your IP address and the details of each request, such as the page requested and your browser. I do not keep any logs of my own. For details, see Cloudflare's privacy policy.
Third-party services
Some content is loaded directly from third-party services. Your browser connects to these services itself, so each of them receives your IP address, as any website you visit would. The services and their purposes are:
- cdnjs (operated by Cloudflare) and jsDelivr: the icons and emoji on every page, and the code highlighting and Markdown libraries on article pages.
- Lanyard, an independent open-source service: my live Discord status on the home page, showing what I am currently listening to and doing.
- Discord and Apple: the album art and activity images for that status. If "Upgrade album art quality" is turned on in Settings, the full-size cover may also be loaded from the image host of Cider, the application I use to play Apple Music.
- Apple (itunes.apple.com): finding the Apple Music link for the song I am playing. Your browser's language is used to select which country's store is searched.
- GitHub: some of the images on the projects page. The star and fork counts are fetched by aridan.net itself, so GitHub does not see your IP address for those.
- LRCLIB, an independent, open database of song lyrics: the lyrics for the song I am playing, only when aridan.net cannot retrieve them itself (see Lyrics below).
Legal basis and international transfers
I use these services on the basis of my legitimate interest in operating a functional personal website (GDPR Article 6(1)(f)). I do not send them any information about you; they receive only what your browser sends when it connects.
Several of these providers are based in the United States, so a connection may reach servers there. Where it does, the transfer is covered by the EU-US Data Privacy Framework or the provider's standard contractual clauses.
Lyrics
When you open the lyrics for a song I am playing, your browser requests them from aridan.net, which retrieves them from LRCLIB on its own, so LRCLIB does not see your IP address. If LRCLIB declines that request, for example because it is under heavy load, your browser requests the lyrics from LRCLIB directly. In that case LRCLIB receives your IP address and the name of the song I am playing. No information about these requests is stored on my side.
Data stored on your device
Your settings, such as the theme, accent colour, language, lyrics style and the options in Settings, are saved in your browser's local storage, together with a small cache of album colours. A service worker also stores a copy of the site's files so that pages load faster and remain available offline.
This data stays on your device and is never sent to me. It is used only to make the site work as you have configured it, so no consent is required. You can delete it at any time in your browser's settings for this site.
If you email me, I receive your email address and the contents of your message, which I use only to reply. Messages remain in my inbox until I delete them, and I will delete yours on request.
Your rights
Under the GDPR, you have the right to access the personal data I hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive a copy of it. Unless you have emailed me, I hold no personal data about you. To exercise any of these rights, contact me at the address above.
Complaints
If you believe your personal data has been handled unlawfully, you can lodge a complaint with Integritetsskyddsmyndigheten (IMY), the Swedish Authority for Privacy Protection, at imy.se.