Transparency
Privacy note
This site is a private, non-commercial project — a showcase of a personal homelab, with no commercial purpose, no advertising and no sale of products or services. The legally required disclosure is in the imprint. This note explains which data a visit produces — and which it does not.
Core principle: data minimisation
The site is deliberately built to minimise data. There is no tracking, no analytics services, no advertising networks and no third-party embeds that would receive data when the page loads. Fonts are served from this site itself (not from a third-party CDN), so no IP address is disclosed to anyone else when the page loads.
What data is processed
The site is protected by a Content-Security-Policy (CSP). Modern browsers can send violation reports (CSP reports) when a resource breaches this security policy. These reports are received on a self-operated endpoint. Specifically:
| Data | Purpose | Retention |
|---|---|---|
| The visited page URL and the blocked resource (from the CSP report) | Detecting and fixing misconfigurations of the security policy | max. 30 days, then automatically deleted |
What is explicitly NOT stored
- No IP address. The visitor's IP address is dropped on receipt of the report and is neither logged nor stored.
- No cookies and no recognition across sessions.
- No sharing with third parties. The reports stay entirely on private hardware; there is no transmission to any external service.
- Answers in the D3FEND cube stay in your browser. They are neither sent nor stored and are gone when the page reloads.
Server logs
As with any web server, short-lived operational logs may occur for technical reasons. They are used only to operate the site securely, are not analysed for usage behaviour, and are likewise kept only briefly.
Contact
Privacy requests, such as access or erasure, go to homelabwsalzer [at] outlook [dot] com. This address serves this website only.
As of: October 2026