Privacy notice
Last updated: 23 July 2026
This site keeps things simple. It serves public content, sets no cookies, and runs no analytics products, ad trackers, or third-party scripts. There's no account to create and no consent banner, because there's nothing on your device to ask about. The only data involved is the standard server log that any website keeps, plus the network transit needed to deliver pages to you at all.
Who is responsible
Boris Stricky is the data controller for this site (borisstricky.dev.br).
Under the LGPD I'm the controlador; there is no separate DPO or
encarregado, so send anything about your data (questions, requests, complaints)
to privacy@borisstricky.dev.br and it comes
to me directly.
What is collected
When you request a page, the server that fronts this site writes an entry to its access log, the same as essentially every web server. Each entry records only:
- your IP address
- the page (URL) you requested and the response status
- the date and time
That's it. No user-agent string, no cookies, no persistent identifier stored on your device, no profile built across sites. The IP address is also used, in memory only and not logged separately, to apply a rate limit that protects the site against abusive traffic.
Hosting provider
This site runs on a virtual server rented from Netcup (Germany), who acts as a data processor on my behalf. Delivering any page to you means your IP address passes over Netcup's network as part of that transit, in addition to the access log above. The scope of Netcup's processing, as agreed in our data processing agreement, is: provision of virtual server (VPS) infrastructure enabling operation of this website, including network transit of data packets (which may contain personal data such as visitors' IP addresses) between the Internet and the server.
Why
These logs exist for basic operational and security visibility: seeing that requests are succeeding, debugging problems, rate-limiting abusive traffic, and getting a rough sense of what content gets read. An IP address is personal data under the GDPR and LGPD, so this processing relies on legitimate interest (GDPR Art. 6(1)(f), Recital 49) rather than consent — no consent banner is needed because nothing is stored on your device, only in the server's own access log.
How long it's kept
Access logs are kept for a limited period, no longer than 90 days, and then rotated and deleted. They aren't combined with anything else, sold, or shared.
Contact
To reach me about any of the below, email privacy@borisstricky.dev.br. If you want to exercise a data-protection right (access, deletion) over your own entries in the access log, include the IP address and approximate time of your visit so the relevant entries can be found.
Changes to this notice
If the site starts doing something new with data, this page gets updated and the "Last updated" date at the top changes with it. Any material change will be described here before it takes effect.