Privacy Notice
How this site handles personal data, and what it does not do.
Controller
Janos Sonntag
E-mail: bovnar@mail.de
Full provider identification is in the Impressum.
What this site does by default
bovnar.io is a static site. There is no account system, no contact form, no advertising, and no third-party content embedded in a page unless you allow analytics below. Everything the site needs — stylesheets, fonts, scripts, the WebAssembly parser used by the playground — is served from bovnar.io itself, so simply reading a page contacts no other company.
Server log data
Delivering a page requires the web server to process the request, and it records the usual access data in doing so: your IP address, the date and time, the path requested, the referring page, and your browser's user-agent string. This is necessary to operate the service and to detect and defend against attacks, which is our legitimate interest under Art. 6(1)(f) GDPR. These logs are not combined with analytics data and are not used to profile visitors. They are rotated daily and deleted automatically after 15 days at the latest.
Storage on your device
The site itself sets no cookies. It keeps up to three small values in your browser's local storage, which are never transmitted to the server:
bovnar-theme — your light/dark choice
bovnar-lang — your choice between the English and the German edition
bovnar-analytics-consent — your answer to the analytics question
Each is written only when you make that choice, is strictly necessary to honour it, and can be
cleared at any time through your browser's site-data settings. Only if you allow analytics
does Google Analytics set two cookies of its own on this site, _ga and
_ga_S8GFD3W21V, which recognise a returning browser for up to two years;
see the next section.
Analytics — Google Analytics 4
This site can use Google Analytics 4 (measurement ID G-S8GFD3W21V) to count
visits and see which documentation pages are read. It is switched off until you
allow it. Until you click “Allow analytics”, no request is made to Google, no script
from Google is loaded, and no analytics identifier is created or stored. Declining, or simply
ignoring the banner, leaves analytics off.
If you do consent, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the pages you view, approximate location derived from a shortened IP address, and technical details of your device and browser, and sets identifiers to recognise a returning browser. Data may be transferred to Google LLC in the United States; Google relies on the EU–US Data Privacy Framework and on the European Commission's standard contractual clauses for such transfers. Google's own description is at policies.google.com/privacy.
Google's advertising features are active on this tag. On the consented path it therefore also
contacts stats.g.doubleclick.net and google.com, and the identifiers
set there are advertising identifiers rather than measurement ones alone: where you are signed
in to a Google account whose settings permit it, Google may associate the visit with that
account, recognise the same browser or person across devices, and use the visit for remarketing
audiences and for the aggregated age, gender and interest reports. None of this happens before
you allow analytics — declining, or withdrawing below, prevents every one of these requests.
What Google links to your account can be reviewed and deleted at
myactivity.google.com,
and ad personalisation can be switched off at
myadcenter.google.com.
Google Analytics deletes the event data it collects here 14 months after collection; the data tied to a returning browser's identifier is kept until 14 months after that browser's last visit. Age, gender and interest data is kept for two months. Aggregated reports derived from the data, such as page-view counts, are not subject to this deletion.
The legal basis is your consent under Art. 6(1)(a) GDPR. You may withdraw it at any time with effect for the future — withdrawing is as easy as granting:
Your choice has been cleared. Reload any page on this site and the banner will ask again.
Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21), as well as the right to withdraw consent at any time. To exercise any of these, write to the address above. You also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence or place of work.