Privacy Policy · Max Hopei

Last updated: 15 August 2026

1. Controller

The controller responsible for processing personal data on this website is:

Max Hopei
Kranichweg 19
81827 Munich, Germany

2. What this website does not collect

maxhopei.com is primarily a statically generated information website. It does not currently provide public user accounts, comments, a contact form, a newsletter, or an on-site checkout. The content-management dashboard runs locally and is not part of the public production website.

The website application does not set advertising or cross-site tracking cookies. The data processing that does occur is described below.

3. Hosting, delivery, and security through Cloudflare

The website is delivered using Cloudflare Workers Static Assets and related network services provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, and its group companies.

When you request a page, Cloudflare necessarily processes technical request data. This may include your IP address, the requested address and file, date and time, HTTP method and response status, referrer, browser and operating-system information, and routing or security information. This processing is needed to deliver the website, maintain its availability and performance, detect abuse, and protect it against attacks.

The legal basis is Article 6(1)(f) GDPR. The legitimate interests are the secure, reliable, and efficient provision of this website. Cloudflare processes customer logs and website traffic on my behalf where it acts as a processor and may process certain network data for its own stated purposes. More information is available in Cloudflare’s Privacy Policy and Data Processing Addendum.

Cloudflare operates a global network, so data may be processed outside the European Economic Area, including in the United States. Cloudflare states that it relies on the EU-US Data Privacy Framework where applicable and otherwise on the EU Standard Contractual Clauses and supplementary safeguards.

Technical request and security data is retained only for as long as needed for delivery, security, troubleshooting, and applicable legal obligations. The exact periods depend on the Cloudflare service and the account configuration and must be verified against the production configuration before launch.

4. Cloudflare Web Analytics

The production website is intended to use Cloudflare Web Analytics to understand aggregate page use and loading performance. A JavaScript beacon is loaded from static.cloudflareinsights.com and sends performance measurements to Cloudflare. Cloudflare describes this service as privacy-first, says it collects the minimum information needed for performance measurement, does not collect or use visitors’ personal data, and does not track individual visitors across its customers’ websites. Query strings are not logged by the analytics service.

Cloudflare Web Analytics does not use cookies for this website. The legal basis for using aggregate, privacy-preserving analytics is Article 6(1)(f) GDPR. The legitimate interest is understanding whether the website is useful and performs reliably without building individual visitor profiles. Cloudflare states that unsampled beacon data is retained for seven days and is then reduced to aggregated, sampled data for longer-term reporting. See Cloudflare’s Web Analytics documentation for current details.

5. Theme preference

If you use the light/dark theme control, the website stores your selection (light or dark) in your browser’s local storage under the key theme. This preference is read on later visits so the website can display the theme you explicitly selected. It is not transmitted to me or used for tracking.

This local storage is used to provide a function you request and is considered necessary for that preference under section 25(2)(2) TDDDG. You can remove it at any time by clearing this website’s stored data in your browser.

6. External links

This website links to independent services, including Amazon, Springer Nature/Apress, Meetup, LinkedIn, and DistroKid. A plain link does not send data to the destination merely because this page is displayed. If you follow a link, the destination receives the technical information normally sent with a web request and processes data under its own privacy policy. Purchases and other interactions take place directly with the relevant provider, not on maxhopei.com.

7. Contact by email

If you contact me by email, I process the information you provide, including your email address, message, and related metadata, to respond to you and manage the correspondence. The legal basis is Article 6(1)(f) GDPR and the legitimate interest in answering legitimate enquiries. If your message concerns steps before entering into a contract, Article 6(1)(b) GDPR also applies.

Correspondence is deleted when it is no longer needed for the enquiry, unless it must be retained longer to comply with a legal obligation or to establish, exercise, or defend legal claims.

8. Recipients and retention

Personal data is shared only where necessary to operate the website, respond to you, comply with the law, or protect legal rights. Relevant recipients may include Cloudflare, email and IT service providers, professional advisers, and public authorities where legally required.

Unless a more specific period is stated above, personal data is deleted or anonymised when it is no longer required for the purpose for which it was processed and no statutory retention duty or legal claim requires continued storage.

9. Your rights

Subject to the conditions in the GDPR, you may request access to and a copy of your personal data, correction of inaccurate data, erasure, restriction of processing, and data portability. You may also object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR.

To exercise these rights, contact me using the email address in section 1. You also have the right to lodge a complaint with a data-protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.

10. Changes to this notice

This notice will be updated when the website’s functionality, service providers, or legal requirements change. The date above identifies the current version.