Privacy Policy
Last updated: July 11, 2026
This is a static placeholder page, built to collect as little about you as possible. There is no advertising, no tracking cookies, no contact form, and no newsletter, and fonts are self-hosted, so loading the page makes no request to Google Fonts or any other third-party font provider. This policy explains the little that is processed when you visit, and your rights under the GDPR.
Who is responsible (controller)
Stephan Christopher KuehnAchlada Maleviziou 157
715 00 Heraklion, Crete
Greece
Email: me [at] stevenkeen [dot] com
A Data Protection Officer is not required for a website of this nature and has not been appointed.
Hosting and server logs (Mittwald)
The website is hosted by Mittwald CM Service GmbH & Co. KG, Germany (EU). When you load a page, the host automatically processes standard technical data in its server logs—your IP address, the page requested, the date and time, and your browser and operating system—to deliver the site securely and detect abuse. Legal basis: our legitimate interest in the secure, stable operation of the website (Art. 6(1)(f) GDPR). These logs are retained for 60 days and then deleted.
Delivery and security (Cloudflare)
DNS, content delivery, and basic security (bot and DDoS protection) run through Cloudflare, Inc. (United States) in front of the hosting. To route and protect requests, Cloudflare processes technical connection data such as your IP address and may set a single strictly necessary security cookie; it is not used for tracking or to build a profile. Cloudflare is certified under the EU–U.S. Data Privacy Framework, and transfers are additionally covered by the European Commission’s Standard Contractual Clauses. Legal basis: our legitimate interest in delivering the website reliably and protecting it against attack and abuse (Art. 6(1)(f) GDPR).
Website analytics (Umami)
To understand aggregate visitor traffic—such as page views, referring sites, and approximate region at country level—this site uses Umami, a privacy-friendly analytics tool hosted on our own server at Mittwald in Germany (EU). Umami sets no cookies, does not store your IP address, and collects nothing that identifies you personally; the data is aggregated and anonymous, and no third-party analytics company receives it. Legal basis: our legitimate interest in understanding, in aggregate, how our content is used so that we can improve it (Art. 6(1)(f) GDPR). Because no cookies are set and no personal data is stored, no consent is required.
Cookies and session storage
This site uses only the single strictly necessary Cloudflare security cookie described above; it sets no tracking, advertising, or analytics cookies of any kind. It keeps one small item in your browser’s session storage—cleared when you close the tab—that never leaves your device and is never transmitted to us or anyone else: your light/dark theme preference. If you reach this site through a campaign link, its UTM parameters appear only in the page address and are not stored on your device. Because nothing here tracks you, no cookie-consent banner is required.
International data transfers
Hosting and the self-hosted analytics run entirely within the EU (Mittwald, Germany), so no transfer outside the EEA takes place for either. Cloudflare is located in the United States, so some technical connection data may be transferred there; this is safeguarded by the EU–U.S. Data Privacy Framework and the Standard Contractual Clauses.
Your rights
Under the GDPR you have the right to access the personal data held about you (Art. 15), have inaccurate data corrected (Art. 16), have your data erased (Art. 17), restrict processing in certain circumstances (Art. 18), receive your data in a portable format (Art. 20), and object to processing based on legitimate interests (Art. 21). To exercise any of these, email me [at] stevenkeen [dot] com.
Right to lodge a complaint
If you believe your data has been processed unlawfully, you may lodge a complaint with a supervisory authority—in particular in the EU country where you live or work, or with the Hellenic Data Protection Authority in Greece, where this site is based (Kifissias Avenue 1-3, 115 23 Athens; www.dpa.gr).
Automated decision-making
Your data is not used for any automated decision-making or profiling within the meaning of Art. 22 GDPR.
External links
This site links to the external website stevenkeen.com. Once you leave this site, that site’s own privacy policy applies.
Changes to this policy
This policy may be updated to reflect changes in practice or the law. The current version is identified by the date shown at the top.