This page explains what visiting this site means for your online privacy.

First and foremost, online privacy is something very important to me. This site was built with your online privacy as a priority from the start. This site is entirely Open Source and its code can be found on GitHub.

Although I have no interest in collecting nor sharing any of your data, due to technicalities some data might be transmitted. The next sections describe in detail the scope of such data transmission.

Data controller

Joao Grassi

privacy (at) joaograssi (dot) com

Accessing this site

Host provider

Data processor: Hetzner Online GmbH with servers within Germany/Finland.

When visiting the site, the following data is stored in the host provider’s log files:

  • Anonymized IP address
  • Browser
  • Date and time of visit
  • Operating system

From the provider’s FAQ

At the web server level, this happens by default by storing an IP address <123.123.123.XXX> in the log file instead of the visitor’s actual IP address, for example, <>. The XXX is a random value between 1 and 254, so it is no longer possible to establish the true identity of the visitor.

Purposes of processing:

  • Ensuring the function of the website
  • Traceability and protection against attacks
  • Legitimate interest based on Article 6(1)(f) GDPR

Data is stored for: 14 days in encrypted backups.

Correspondence and contact

Data processor: Heinlein Hosting GmbH (Email provider)

If you contact me by phone or email, the personal data you voluntarily provide (at least phone number/email address, probably also first and last name) will be automatically stored on my mobile phone / in my email inbox. All data - if not stored locally - is located on servers in Germany.

Type of data:

  • Names
  • Telephone number/email address,
  • Further voluntary provided information

Purposes of processing:

  • Enabling communication
  • Your consent based on Article 6(1)(a) GDPR

Data is stored for: The duration of the communication, in case of a business relationship or business initiation, for 7 years, due to documentation obligations and legal storage regulations such as e.g. warranty, claims for damages, liability claims.