Privacy policy

This is a translation for convenience. The German version at/de/datenschutz/is the legally binding one.

Controller

Christian Dirnhofer, Neuschmied 12, 83246 Unterwössen, Germany.
Email: christian@dirnhofer.net

Hosting by GitHub Pages

This website is hosted by GitHub Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA, as GitHub Pages. When the site is accessed, GitHub processes technically necessary connection data in server log files, in particular your IP address, the date and time of access, the page accessed, the browser type, and the operating system. The legal basis is Art. 6 Abs. 1 lit. f DSGVO; my legitimate interest lies in the secure and reliable operation of this website. Processing also takes place in the USA. Details can be found in GitHub’s privacy statement at docs.github.com.

No cookies, no tracking

This website does not set cookies, does not embed any analytics or tracking services, and does not use advertising networks. No profiling takes place.

Fonts

All fonts used are served from this server. There is no connection to Google Fonts or any other external service.

Local browser storage

A short intro animation is shown the first time the site is opened in a browser session. To prevent it from repeating, an entry is stored in your browser’s sessionStorage.

Every page also has a terminal docked at the bottom, which can unlock the cv via a su command. On a successful entry, a second sessionStorage entry is stored, so the cv page knows it was unlocked when it is opened. A third entry holds the terminal’s output and the commands typed into it, along with the height it was set to, so it carries on when you move to another page.

The same terminal starts a small capture the flag game with ctf. After that, entering a correct flag with submit opens an encrypted page. A fourth sessionStorage entry records whether and when the game was started, when each page was opened and when the game was finished, the key derived from the flag for each opened page and how many hints were requested with hint. This keeps opened pages open when you move to another page and lets the site show the time you took at the end.

All four entries contain no personal data, are never transmitted to me, and are deleted when the browser tab is closed. The legal basis is § 25 Abs. 2 Nr. 2 TDDG, as all four entries are strictly necessary to provide the respective presentation you requested.

At the end of the game your browser turns these times into a code. It is not transmitted to me. If you choose to send it to me, for example in a public issue on GitHub or by email, I process your name, your time, the number of hints and the date to add you to a public leaderboard. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time, for example with a comment on the issue, and I will remove the entry. GitHub’s privacy statement applies to the issue itself.

Contacting me by email

If you write to me by email, I process the information you provide in order to handle your enquiry, on the basis of Art. 6 Abs. 1 lit. b or lit. f DSGVO. I delete this data as soon as it is no longer required for that purpose and no statutory retention obligations apply.

Your rights

You have the right to access (Art. 15 DSGVO), rectification (Art. 16 DSGVO), erasure (Art. 17 DSGVO), restriction of processing (Art. 18 DSGVO), data portability (Art. 20 DSGVO), and a right to object to processing (Art. 21 DSGVO). To exercise these rights, please contact the address given above.

You also have the right to lodge a complaint with a supervisory authority. The competent authority is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach.