This policy explains what personal data Mossbank collects, why, on what legal basis, who processes it on our behalf, and the rights you have under the General Data Protection Regulation (GDPR).
Who we are
This website is operated independently as a personal content project. For any privacy request, data-subject enquiry (access, erasure, objection, etc.) or other data-protection matter, email privacy@mossbank.de. This mailbox is monitored and we respond within one month.
Newsletter
If you choose to subscribe to our newsletter, we collect your email address and, optionally, your name. We use these to send you the emails you asked for. The list is processed in our own self-hosted listmonk instance running on our server. The emails are delivered through Amazon SES (Amazon Web Services), which acts as our email-delivery processor.
The legal basis is your consent (GDPR Art. 6(1)(a)). We use double opt-in, so you confirm your address before we send anything. Every email carries a one-click unsubscribe link. We keep your details until you unsubscribe, after which we remove them from the active list.
Analytics
To understand which pages are read, we use GoatCounter, which we host ourselves rather than handing your visit to a third party. It is cookieless, sets no cookies, collects no personal data and does no cross-site tracking. It records an aggregate page view with non-identifying details such as the page address, the referring site, a broad country derived from your network, and the type of browser and screen. It does not store your full IP address.
The legal basis is our legitimate interest (GDPR Art. 6(1)(f)) in understanding aggregate visitor numbers so we can improve the site. Because it identifies no one and sets no cookie, it needs no consent.
Advertising
We carry advertising through Google AdSense to help cover running costs. AdSense may set cookies to serve adverts and, with your consent, to personalise them. The legal basis is your consent (GDPR Art. 6(1)(a)), which we collect through the cookie-consent banner shown on your first visit. You can change or withdraw that consent at any time using the "Manage preferences" control in the banner. If you reject advertising cookies, adverts may still be shown but are not personalised. You can read more in Google's advertising policy and Google's privacy policy.
Affiliate links
Some outbound links on this site are affiliate links. If you follow one and buy something, we may earn a small commission at no extra cost to you. We do not collect any additional personal data through these links, but the destination site is run by someone else and has its own privacy policy, which will govern anything you do there.
Hosting and server logs
The site is hosted on Netlify. Like any web host, Netlify processes standard server logs, which can include your IP address and browser user agent. These are handled transiently to deliver the pages to you and to keep the service secure.
Processors we use
- Amazon Web Services: email delivery for the newsletter, via Amazon SES.
- Google: advertising, via Google AdSense.
- Netlify: hosting and content delivery.
Our listmonk newsletter software and our GoatCounter analytics are self-hosted on our own server, so no third party is involved in those.
Cookies
Below is a summary of the cookie categories used on this site. You control the analytics and advertising categories through the consent banner.
| Category | Purpose | Consent |
|---|---|---|
| Necessary | Remembers your cookie choices and keeps the site working. | Always on; no consent needed. |
| Analytics | Aggregate visitor statistics via self-hosted, cookieless GoatCounter. Sets no cookie. | No cookie is set, so no consent is required. |
| Advertising | Google AdSense cookies to serve and, with consent, personalise adverts. | Only with your consent. |
Retention
Newsletter details are kept until you unsubscribe. Analytics records are aggregate and hold no personal data. Server logs are short-lived and handled by our host. We do not keep personal data for longer than we need it for the purpose it was collected.
Your rights
Under the GDPR (Art. 15 to 22) you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw any consent you have given at any time without affecting processing already carried out. To exercise any of these, email privacy@mossbank.de. We will respond within one month.
If you believe we have handled your data improperly, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) in Brussels.
Changes
If this policy changes, the "last updated" date below will change with it.