Back
Legal

Privacy Policy

maxdittmar.dev Effective 4 October 2026

1. Who is responsible

Maximilian Dittmar, c/o COCENTER, Koppoldstr. 1, 86551 Aichach, Germany. Email: info@maxdittmar.dev.

This website is my personal portfolio. It is a static site with no accounts, no comments and no user submitted content. This policy explains which personal data is processed when you visit it, why, and what rights you have.

2. Overview

In short:

  • Cloudflare delivers the site and protects it against attacks. It processes the technical data of every request and may set short lived security cookies.
  • A consent banner by CCM19 asks for your choices and remembers them in your browser.
  • The newsletter sign up form is provided by Brevo, which receives your email address only if you subscribe.
  • There is no analytics, no advertising and no tracking by this site, and all fonts are served from this site.

3. Hosting and security

This site is hosted on Cloudflare, operated by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare delivers the static files and also acts as a content delivery network and security layer, so your request is routed through Cloudflare servers.

Like any web server, Cloudflare processes technical connection data such as IP address, date and time of the request, the page requested, the referring page, and browser and operating system. This happens on the basis of Article 6(1)(f) GDPR, for the secure and reliable operation of the site. These logs are held by Cloudflare, not by this site.

To tell people from automated attacks, Cloudflare can run a short check in your browser and set security cookies, such as __cf_bm (about 30 minutes) and, after a security challenge, cf_clearance. They are used only for this protection, not for tracking. Storing them is strictly necessary to provide the site securely (section 25(2) no. 2 TDDDG); the processing is based on Article 6(1)(f) GDPR.

Cloudflare may process this data on servers outside the European Union. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, and its data processing agreement, which is in place, also includes the EU standard contractual clauses. Details are set out in the Cloudflare privacy policy.

4. Consent banner

This site uses the consent tool CCM19 by Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany. Its script is loaded from CCM19 servers in Germany when you open a page, which sends your IP address and the technical data of the request to CCM19.

CCM19 shows the banner, records your choices and keeps them in your browser's local storage under the name ccm_consent for one year, so you are not asked again on every page. It also counts how often the banner was shown and which choices were made, as statistics for me.

This is based on Article 6(1)(c) GDPR together with Article 7(1) GDPR (I have to be able to show which consent was given), and storing your choice is strictly necessary (section 25(2) no. 2 TDDDG). CCM19 processes the data on my behalf under a data processing agreement (Article 28 GDPR).

You can change or withdraw your choices at any time with Cookie Settings in the sidebar, or Cookies in the strip under the tab bar on a phone.

5. Newsletter

You can subscribe to an occasional newsletter about my games. The sign up form and the newsletter are provided by Brevo, operated by Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France, which processes the data on my behalf under a data processing agreement (Article 28 GDPR).

  • Showing the form: the form is loaded from Brevo servers on the pages that show it (the profile, the newsletter page and some posts). When it loads, your browser sends your IP address and the technical data of the request to Brevo. This is based on my legitimate interest in offering the sign up (Article 6(1)(f) GDPR).
  • Signing up: you enter your email address. Brevo stores it together with the time and IP address of your sign up, and of your confirmation where a confirmation email is sent, so that your consent can be shown. The legal basis is your consent (Article 6(1)(a) GDPR).
  • Reading: the emails can contain a small image and links that tell Brevo whether a newsletter was opened and which links were clicked. I use this only to see which topics interest readers, and it is part of the consent you give when subscribing.
  • Leaving: you can unsubscribe at any time with the link in every newsletter or by writing to me. Your consent then ends for the future; what happened before stays lawful (Article 7(3) GDPR). I stop sending and delete your address, except that Brevo may keep it on a block list so you are not sent anything again.

Further details are in Brevo's privacy policy.

6. Fonts

All typefaces are served from this site. No font is loaded from Google Fonts or any other external font service, so viewing the site sends no request to a third party font host.

7. Browser demos

Some games in development can be played in the browser on their game page. A demo only loads when you start it. It is served entirely from this site, fonts included, and sends no requests to any other service.

A demo keeps your progress, settings and any maps you make in your browser's local storage, on your device only, so you can continue where you stopped. Nothing is sent to this site or to anyone else. A map you save as a file or copy stays with you. Clearing this site's data in your browser removes what the demo kept.

8. Email

If you write to me by email, I use your address and your message only to answer you (Article 6(1)(f) GDPR, or Article 6(1)(b) GDPR where it concerns a contract). I delete them once the matter is settled, unless the law requires me to keep them longer.

9. External links

Links to the App Store, Google Play, LinkedIn and other sites are governed by the privacy policies of those services, not by this one. They only receive data once you follow a link.

10. Games

Each game has its own privacy policy covering data handled inside that game. Those are linked from the game page and are separate from this document.

11. Your rights

You have the right to access the personal data I hold about you (Article 15 GDPR), to have it corrected (Article 16) or deleted (Article 17), to restrict its use (Article 18), to receive it in a portable form (Article 20) and to object to processing based on legitimate interests (Article 21). You can withdraw a consent at any time with effect for the future.

You can also complain to a data protection authority, for example the one responsible for me: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

12. Contact

For any privacy question about this website, contact info@maxdittmar.dev.