Privacy policy

Controller

Jonas Hallmann
c/o POSTFLEX PFX-238-021
Emsdettener Straße 10
48268 Greven
Germany
Email: bitelite.dev@gmail.com

In short

This website sets no cookies, uses no analytics or advertising services and loads nothing from third-party servers. Text uses the fonts already installed on your device; the one font used in the BiteLite card is served from this server. That is why there is no consent banner: there is nothing to consent to.

Step counter

When a step page or the final page is opened, the server increases a counter for that step by one. The only things stored are the step number with its total count, kept separately for two rough categories: "AI assistant or script" and "browser". The category is guessed at that moment from the browser identification (user agent) your device sends; the user agent itself is not stored. No IP addresses, no identifiers, no cookies and no time of the individual visit are stored by this counter. It is therefore not possible to recognise individual visitors. The totals are shown on the final page and on the results page.

To protect the counter against flooding, the server keeps a short list for the current minute only. It contains a shortened keyed hash of the IP address, computed with a secret key that changes every day, so the IP address cannot be read back from it. The list is replaced every minute and is used for nothing else. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is to show how far visitors get, which is the purpose of this demonstration.

Server log files

When you open a page, your browser automatically transmits technically necessary data, which the hosting provider stores in log files: IP address, date and time of the request, the address requested, the referring page, the browser and operating system (user agent), the status of the request and the amount of data transferred. This is necessary to deliver the website and to keep it secure and stable. The legal basis is Art. 6 (1) (f) GDPR. The log files are deleted after a short period and are not combined with other data.

Hosting

This website is hosted by ALL-INKL.COM, Neue Medien Münnich, in Germany. The hosting provider processes data on my behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Contact by email

If you write to me by email, I use your email address and the content of your message only to answer your request. The legal basis is Art. 6 (1) (f) GDPR. I delete the data once your request has been dealt with, unless statutory retention obligations apply.

Links to other websites

The final page links to my other projects. If you follow a link, the privacy policy of the website you visit applies there. No data is transmitted to these websites before you click.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

There is no automated decision-making or profiling. You are not obliged to provide any personal data.

Status: October 2026