Privacy Policy

This site is a static personal / consulting website operated by Martin Kleinberger (Co. Cork, Ireland). It runs no advertising and no third-party analytics or tracking. The only processing of personal data is the optional sign-infeature described below, plus standard web-server and CDN access logs.

Last updated: 6 September 2026

Signing in with Google or Facebook

Sign-in is entirely optional — the site is fully usable without an account. If you choose to sign in, authentication is handled by a self-hosted service atlogin.kleinbem.dev that I operate on my own infrastructure. No account or password is created on this site; you authenticate directly with Google or Facebook.

What is stored

• From your Google or Facebook profile: your name,email address, profile picture URL, and the provider's account identifier.
• The OAuth tokens the provider issues so the session can be established. Offline / long-term access is not requested.
• Session records: a session identifier, its creation and expiry time, your IP address, and your browser's user-agent string.

Purpose and legal basis

This data is used solely to authenticate you and keep you signed in acrosskleinbem.dev and its subdomains. The legal basis is your consent, given when you choose to sign in (GDPR Art. 6(1)(a)), and the performance of providing the account feature you requested.

Cookies

A single session cookie is set on the .kleinbem.dev domain only after you sign in, so the session works across subdomains. It is removed when you sign out. There are no advertising or tracking cookies, and no cookies at all until you sign in.

Third parties

Google / Meta

Used only as identity providers when you choose that sign-in method. Their handling of your data on their side is governed by their own privacy policies. This site requests only your basic profile (name, email, picture).

Cloudflare

CDN and reverse proxy. Access logs record technical data including IP addresses, processed on a legitimate-interests basis to deliver and secure the site, and retained only briefly.

Your sign-in data is not sold, rented, or shared with advertisers, and is not used for profiling or automated decision-making.

Retention and your rights

Account data is kept until you ask for it to be deleted; expired sessions are removed automatically. To delete your account and associated data, or to exercise your rights of access, rectification, erasure, portability, or objection under the GDPR, email[email protected]. You may also lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

This policy may be updated; material changes will be reflected in the “last updated” date above. See also the Legal Notice. Not legal advice.