Legal · who runs this site and how your data is handled

Imprint & Privacy

Who publishes davidtofan.com, how to reach them, and what happens to data when you visit.

Last updated:

Site owner

David Tofan
Private individual, resident in the European Union

Contact

For questions, corrections, privacy requests, or legal notices, reach me by email:

personal.implicit244@passmail.net

Responsible for the content

David Tofan is responsible for all editorial content published on this website, and can be reached through the contact channel above.

Content here is published to the best of my knowledge and belief, and in good faith. At the time of publication I was not aware of any of it being unlawful, infringing the rights of others, or otherwise objectionable, and nothing is published with that intent.

If you believe something on this website is unlawful, infringing, inaccurate, or out of date, please tell me at personal.implicit244@passmail.net. I will review it promptly and correct or remove it without undue delay. The same applies to the third-party content this site links to, as set out in the Disclaimer.

Nature of this website

This is a personal website, published in a private capacity. There is no account system, no newsletter, no contact form, no advertising network, and nothing is sold here. It is not registered in any commercial register and holds no VAT identification number.

One exception to note: some outbound links on the Referrals page are referral links. If you sign up for a service through one of them, I may receive a credit, discount, or similar benefit — at no additional cost to you. This never affects what I recommend or write.

Independence

This website is published in a purely personal capacity. It is not operated, sponsored, reviewed, or endorsed by my employer or by any other organisation, and it does not represent their views. See the Disclaimer for details.

Privacy

Short version: this site has no tracking, no advertising, no profiling, and no cookie banner — because it sets no cookies of its own and collects nothing about you beyond what is technically needed to serve and protect the page.

Who is responsible

The controller for the purposes of the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679 is David Tofan, reachable via the contact channel above.

What is processed when you visit

This website is delivered through Cloudflare, which acts as my processor. To serve the page and protect it against attack and abuse, Cloudflare processes the connection data every web request necessarily carries: your IP address, a derived two-letter country code, the requested URL, referrer, user agent, timestamp, and a request identifier.

Legal basis: Article 6(1)(f) GDPR — my legitimate interest in delivering this website securely and reliably. I do not maintain my own separate visitor logs, and I do not attempt to identify individual visitors.

Cookies and local storage

This website sets no cookies of its own. Cloudflare may set strictly necessary security and delivery cookies — such as __cf_bm (bot detection, expires after 30 minutes of inactivity), cf_clearance (proof of passing a challenge), or _cfuvid (rate limiting). Per Cloudflare's documentation these are used solely for security and performance, and __cf_bm does not track users from site to site or session to session.

Your light/dark theme choice is stored in your browser's localStorage under the key theme. It never leaves your device and is never sent to me.

Because all of the above is strictly necessary or a preference you actively requested, it is exempt from the consent requirement in Article 5(3) of the ePrivacy Directive 2002/58/EC — which is why you are not asked to click through a cookie banner.

The search function is powered by Cloudflare AI Search. If you open it and type a query, that query is sent to a Cloudflare endpoint in order to return results. Nothing is searched or transmitted until you use it. Please do not enter personal or confidential information into the search box. Legal basis: Article 6(1)(f) GDPR.

Analytics

This website uses Cloudflare Web Analytics to understand aggregate traffic and page performance. It is enabled through Cloudflare's automatic setup, so the measurement script is inserted as the page is served rather than forming part of the site's source code.

It is privacy-preserving by design: per Cloudflare's documentation it uses no cookies, stores nothing in your browser, performs no fingerprinting, and discards your IP address at the nearest Cloudflare data center. It measures page views and performance metrics, not people — there is no cross-site or cross-session tracking, and no profile of you is built.

Because it writes nothing to and reads nothing from your device, it does not trigger the consent requirement in Article 5(3) of the ePrivacy Directive. No other analytics, advertising, or tracking scripts are used.

External and referral links

Following a link to another website — including the referral links described above, and my social profiles linked in the site footer — hands you over to that operator, whose own privacy policy then applies. Referral links may let the destination service attribute your sign-up to me. I receive no personal data about you in that process beyond, at most, an anonymous count.

International transfers

Cloudflare operates a global network, so processing may take place outside the European Economic Area. Such transfers are covered by the safeguards Cloudflare maintains for this purpose, including EU Standard Contractual Clauses.

Retention

Connection and security data is retained only briefly by Cloudflare for operational and security purposes and is not archived by me. If you email me, I keep that correspondence only as long as needed to deal with your request.

Your rights

Under Articles 15 to 21 GDPR you have the right to request access to your personal data, and its rectification or erasure; to request restriction of processing; to data portability; and to object to processing based on legitimate interests. Use the contact channel above.

You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR), normally the one for your country of residence.

There is no automated decision-making or profiling on this website, and no personal data is sold or shared for advertising.

Liability and links

Liability for the content of this website, and for the content of third-party sites linked from it, is governed by the Disclaimer, which forms part of this imprint. Terms for AI crawlers, retrieval, and training are set out on the AI Licensing Terms page.

Unless stated otherwise, original content on this website is protected by copyright and remains the property of David Tofan. Trademarks, logos, and brand names are the property of their respective owners and are used for identification and commentary only.