Privacy policy

This page explains which personal data is processed when you visit this website. The website is a static one-pager: no shop, no account, no forms and no comments.

1. Controller

André Silva Burgstahler, email legiox.ai@gmail.com. Postal address: see the legal notice at legiox.eu.

2. Hosting and server logs (Cloudflare)

The website is delivered with Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare is our processor (Art. 28 GDPR).

When you open a page, Cloudflare processes the technical connection data needed to deliver it, in particular your IP address, date and time, the requested address (URL), the amount of data transferred, the status code and browser and operating system details (user agent, language setting). This is necessary to deliver the pages and to run the website securely and reliably, including defence against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and efficient operation). We do not keep our own server logs and do not evaluate this data. The retention period at Cloudflare follows Cloudflare’s information.

3. Visit statistics (Cloudflare Web Analytics)

We measure with Cloudflare Web Analytics how many people visit this website, which pages are viewed, where visitors come from and how fast the pages load. To do this, your browser loads a small script from static.cloudflareinsights.com and sends measurement data to cloudflareinsights.com. The provider is Cloudflare, Inc. (see section 2); Cloudflare is our processor (Art. 28 GDPR).

Which data. We process the page viewed (URL), the page you came from (referrer), browser and operating system details (user agent) and performance values from your browser (for example load times and Core Web Vitals). For technical reasons, Cloudflare also receives your IP address. According to Cloudflare, the IP address is discarded at the nearest data center and is not stored in databases or logs. According to Cloudflare, it does not track individual visitors across websites and does not create a “fingerprint” (fingerprinting) from the IP address, user agent or other data. We see the results only as statistics and do not keep profiles of individual visitors.

No cookies, no local storage. The script sets no cookies, stores nothing in the local storage (localStorage, sessionStorage) or IndexedDB of your device and does not access data stored there. For this reason we do not ask for consent for it and do not show a cookie banner.

Purpose and legal basis. The purpose is to understand and improve the reach and performance of the website, for example to spot slow pages. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a needs-based and technically sound website).

Recipients and third countries. The recipient is Cloudflare as processor. The measurement data is processed in the Cloudflare data center nearest to you, which may be outside your country and outside the EU. For transfers to the USA, see section 5. The retention period follows Cloudflare’s information; we do not keep our own copies.

Objection. You can object to this processing at any time under Art. 21 GDPR, on grounds relating to your particular situation, informally by email to legiox.ai@gmail.com. You can also block the script technically, for example with a content blocker for cloudflareinsights.com; the website works unchanged without it. More information: Cloudflare Web Analytics.

4. Cookies, local storage, email and external links

This website sets no cookies. The only thing it can store is your choice between light and dark mode in the local storage of your browser (theme), and only when you use the switch. It is strictly necessary for the display you asked for (§ 25(2) no. 2 TDDDG); you can delete it in your browser at any time. There are no advertising cookies, no social media plugins, no embedded third-party content and no external fonts; the font is delivered by this website itself.

If you write to us by email, we process your email address and your message to answer you (Art. 6(1)(b) or (f) GDPR) and delete them when the matter is closed and no retention duty applies. The links to LinkedIn, Medium, Substack, dev.to, Hashnode, GitHub and others lead to external websites. Once you open them, those providers process data under their own privacy policies.

5. Transfers to third countries (USA)

Cloudflare, Inc. is based in the USA. Even where data is processed in the EU, access by Cloudflare, Inc. or affiliated companies from the USA cannot be ruled out. We rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework of 10 July 2023, under which Cloudflare, Inc. is certified, and additionally on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR) in the data processing agreement with Cloudflare. You can get a copy of the safeguards on request. More information: Cloudflare’s privacy policy.

6. Your rights

You have the following rights regarding your personal data: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection to processing based on legitimate interests (Art. 21) and withdrawal of consent given with effect for the future (Art. 7(3)). An informal email to legiox.ai@gmail.com is enough. There is no automated decision-making including profiling.

7. Complaint to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The authority responsible for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI), Lautenschlagerstraße 20, 70173 Stuttgart, poststelle@lfdi.bwl.de, www.baden-wuerttemberg.datenschutz.de.

8. Changes

We update this policy when the website or the law changes. The version published here applies. The German version (Datenschutzerklärung) is the legally binding one.

Last updated: 24 October 2026