Privacy policy

Controller under the GDPR: MikeIT.dev (operator: Mike Gölz) Mike Gölz F5, 14 68159 Mannheim Deutschland Privacy contact: contact@mikeit.dev

This notice covers personal data processed on mikeit.dev, when you contact us and through our business social profiles. The website does not embed analytics or marketing trackers and has no newsletter. External app purchases and processing inside apps are explained separately. Footer icons are ordinary links. The Cal.com calendar is embedded only after you choose to load it. The static Pinterest domain verification tag and Mastodon verification link are not advertising pixels.

The website is hosted by Vercel Inc., USA, and delivered through a content delivery network. Technical access information such as IP address, time, requested URL, browser information and errors is processed to deliver and protect the website and maintain its stability. The basis is Art. 6(1)(f) GDPR, our legitimate interest in secure website operation. Technical information is retained for the purposes of the hosting and security features in use; periods depend on the feature and configuration. Necessary security records may be retained until an incident is resolved. Vercel publishes its processing and international transfer provisions, including standard contractual clauses, at https://vercel.com/legal/dpa and its privacy notice at https://vercel.com/legal/privacy-policy . Processing in the United States is possible. Vercel Web Analytics is not embedded in the website code.

The domain mikeit.dev is managed by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS is the domain registrar, not the website host. Content delivery is via Vercel.

Technical data is processed when you visit (see hosting). We do not build advertising profiles.

Your cookie choice is stored locally as MIKEIT_COOKIE_CONSENT. Your selected light/dark display preference is stored as mk-theme. These values remain until removed in your browser. The contact form also uses the mk_cfrl security cookie, which lasts 24 hours. Only with functional consent do we store your language as MIKEIT_LOCALE in a cookie (up to 365 days) and in localStorage (no automatic expiry). Withdrawing functional storage removes both language values. Residues from older versions are also removed on the next visit without the corresponding consent. Language remains selectable through /de and /en. Display and cookie choices are not removed. Optional storage relies on Section 25(1) TDDDG and, where personal data is involved, Art. 6(1)(a) GDPR. Required storage for your choices, requested display and abuse prevention relies on Section 25(2)(2) TDDDG; personal technical processing relies on Art. 6(1)(f) GDPR. No statistics or marketing storage is used. Change your choice through Cookie settings in the footer. Details: https://mikeit.dev/en/cookies .

When you email contact@mikeit.dev, we process sender and contact information, message contents and any attachments to answer your request. Contract-related requests rely on Art. 6(1)(b) GDPR; other inquiries rely on Art. 6(1)(f) GDPR and our interest in business communication. Our business mailbox is provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Incoming and outgoing messages are processed there. Provider notice: https://www.ionos.de/terms-gtc/datenschutzerklaerung/ . Messages are retained to handle the request and then deleted unless statutory retention duties or necessary records, for example for ongoing contracts or claims, require retention. Please initially send only necessary, preferably anonymized project information.

The form requires topic, name, company and email; phone and message are optional. The checkbox acknowledges this notice and does not provide consent to advertising or additional processing. Contract-related requests rely on Art. 6(1)(b) GDPR; other inquiries rely on Art. 6(1)(f) GDPR. Email delivery uses Resend (Plus Five Five, Inc., USA). Form information is transmitted for delivery to contact@mikeit.dev. The provider currently states that email and log data is stored in the United States; an EU sending region does not mean storage exclusively in the EEA. Resend states a 30-day retention period for email/log data on Free, Pro and Scale plans. Other plan agreements and legal duties may provide different periods. Details: https://resend.com/legal/privacy-policy and https://resend.com/security . Published processing and transfer terms, including standard contractual clauses, are at https://resend.com/legal/dpa . Abuse prevention: the signed HttpOnly cookie mk_cfrl stores timestamps and counters for 24 hours. The executing server instance also processes IP and normalized email information in memory for 15-minute counting windows. Expiry permits a new counting window. Check values may remain in memory until overwritten or the server instance ends. This data is not used for advertising profiles. The basis is Art. 6(1)(f) GDPR and our interest in protection against spam and excessive requests. The necessary security cookie relies on Section 25(2)(2) TDDDG. Cloudflare Turnstile is currently not embedded. Its integration and these notices will be reviewed before activation. Retention of the delivered message in our business mailbox follows the Contact by email section.

You can load an external Cal.com calendar on the contact page. No Cal.com iframe is embedded before that click. Choosing Load calendar consents to the transmission of your IP address and browser information required for loading, and access by the external booking service. The provider may use storage technologies and process data outside the EEA. We do not claim exclusive EU storage. You enter the information required for booking, such as name, email and appointment, directly with the booking provider. Loading relies on Art. 6(1)(a) GDPR and, where required, Section 25(1) TDDDG. Contract-related appointment handling relies on Art. 6(1)(b) GDPR; other scheduling relies on Art. 6(1)(f) GDPR. Provider, recipient, retention and international processing information: https://cal.com/privacy ; published processing terms: https://cal.com/dpa . You can close the embedded calendar using Back. This stops the embedding but cannot reverse data already transmitted. Email contact remains available without loading the calendar.

Footer icons are locally served SVG graphics with ordinary links to our profiles on LinkedIn, GitHub, YouTube, Instagram, Facebook, X, TikTok, Google, Pinterest, Mastodon, Bluesky, Reddit, Threads and XING, and to email. Inactive entries are not clickable. These links do not load platform feeds, social SDKs or advertising pixels. Opening a link leaves this website; the destination provider's privacy notice applies there. Pinterest verification uses a static identifier in the HTML head, not an advertising or conversion tag. Mastodon rel=me only establishes the relationship between website and profile.

These notices also cover our business profiles and the MikeITdev Discord server. The provider identified above is responsible for processing initiated by us. We process visible profile names, public comments and reactions, messages and information voluntarily supplied in them to answer questions, present our work and moderate discussions. This relies on Art. 6(1)(f) GDPR and our interest in business communication. Contract-related inquiries rely on Art. 6(1)(b) GDPR. Messages are retained to handle the request and afterwards only for statutory duties or necessary records. Public interactions may remain visible until removed. Platform operators also process usage, device and profile information for their own purposes, potentially outside the EEA. Their notices linked below explain processing, retention and settings. We cannot fully control their storage, backups or redistribution. Federated public content in particular can reach other servers. Please do not share confidential client information or particularly sensitive data in public comments. Independent contact is available at contact@mikeit.dev. You may also address privacy rights to us. We handle requests within our responsibility and involve the operator where needed. No public Discord invitation is currently provided on this website.

For Facebook Page Insights, Meta Platforms Ireland Limited and page operators describe joint responsibility for the processing specified in the addendum. We receive aggregated statistics to understand use of and responses to our business content, based on Art. 6(1)(f) GDPR. The allocation of duties, Meta's information obligations and contact options are at https://www.facebook.com/legal/terms/page_controller_addendum . This does not automatically cover all other processing by Meta or us. For specified LinkedIn Page Insights concerning EEA/Swiss members, there is joint controllership with LinkedIn Ireland Unlimited Company. LinkedIn provides aggregated statistics and assumes the duties described in its addendum: https://www.linkedin.com/legal/l/page-joint-controller-addendum . Our purpose is likewise understanding responses to our content, based on Art. 6(1)(f) GDPR. Other account statistics, for example on Instagram, YouTube, TikTok or Pinterest, are separate from those specific addenda. We do not claim joint controllership for all services. Our website does not embed their advertising pixels.

Facebook: https://www.facebook.com/privacy/policy/ Instagram: https://privacycenter.instagram.com/policy/ Threads: https://help.instagram.com/515230437301944 LinkedIn: https://www.linkedin.com/legal/privacy-policy XING: https://privacy.xing.com/de/datenschutzerklaerung X: https://x.com/en/privacy Google / YouTube: https://policies.google.com/privacy TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/de Pinterest: https://policy.pinterest.com/de/privacy-policy GitHub: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement Bluesky: https://bsky.social/about/support/privacy-policy Mastodon.social: https://mastodon.social/privacy-policy Reddit: https://www.reddit.com/policies/privacy-policy Discord: https://discord.com/privacy

YouTube videos are not embedded yet. If we add YouTube embeds later, Google (YouTube LLC) may process personal data (e.g. IP address, usage data). Embeds would then only load after consent via cookie settings, if technically implemented.

The site uses the Geist font via next/font from Next.js. Font files are bundled at build time and served from our host (Vercel). Visitors' browsers do not connect to Google Fonts.

The website embeds no analytics or marketing scripts and has no newsletter. Payment information is not collected through a payment form of our own. External app purchases, where offered, use the provider identified on the product page. The app itself also has a separate privacy notice: https://mikeit.dev/en/apps/quacktile/privacy .

Art. 6 (1) (f) GDPR: operation and security Art. 6 (1) (b) GDPR: contact about services Art. 6 (1) (a) GDPR: optional functional storage if you consent

Data is kept only as long as needed for the purpose or as required by law.

Depending on use, recipients include Vercel (hosting/security), IONOS (domain and email), Resend (form delivery), Cal.com after loading and platform operators when their social services are used. Domain registrars and social operators are not automatically our processors; their roles depend on the processing purpose. Provider terms and privacy links are in the relevant sections. We do not share our inquiry information for third-party advertising.

Vercel, Resend, Cal.com and social platforms may process information outside the EU/EEA, particularly in the United States. Transfer grounds and safeguards depend on the recipient and processing, for example an applicable adequacy decision or standard contractual clauses with necessary supplementary measures. An EU sending region does not guarantee exclusive EU storage. Provider information and published transfer terms are linked in the relevant sections. Contact contact@mikeit.dev for information on safeguards applicable to our processing.

Subject to statutory conditions, you have rights of access, rectification, erasure, restriction and portability. You may object to legitimate-interest processing on grounds relating to your particular situation and may object to direct marketing at any time. You may withdraw consent at any time for the future, without affecting earlier lawful processing. Control browser storage through Cookie settings in the footer; close the external calendar to stop embedding it. This does not reverse information already transmitted. Contact: contact@mikeit.dev. You may complain to a data protection authority, particularly in your place of residence, work or the alleged infringement. Our supervisory authority is the Baden-Württemberg Commissioner for Data Protection and Freedom of Information: https://www.baden-wuerttemberg.datenschutz.de/ .

The site is served over HTTPS with appropriate technical measures.

This notice is updated when processing changes. Revised version: 22 October 2026.