Last updated: 12 November 2026
This policy explains what personal data hadberg.eu collects when you visit, why, and what rights you have. The site is a personal blog. I don’t sell your data, I don’t run ads, and I don’t use third-party tracking or marketing tools.
Who is responsible
Lucas Hadberg, Denmark, runs this site and is responsible for your data. You can reach me through the contact page.
What I collect and why
Visit statistics. The site uses WP Statistics, a plugin that runs on this site’s own server, to count visits and see which posts people read. It processes your IP address, the page you visit, the site you came from, and your browser, device type and approximate country. The statistics stay on this server and are not shared with anyone. Legal basis: my legitimate interest in understanding which content is useful (GDPR Article 6(1)(f)).
Security logs. The site uses the WP Cerber security plugin and a web application firewall from the hosting provider, Simply.com, to block attacks and spam. They log IP addresses, requested pages and timestamps, and the firewall may set a short-lived cookie (sc_clearance) after an automatic browser check. Legal basis: my legitimate interest in keeping the site secure (Article 6(1)(f)).
Comments. If you leave a comment, WordPress stores the name, email address and optional website you enter, plus your IP address and browser details, to help detect spam. Your email address is never shown publicly. WordPress may send an anonymized string created from your email address (a hash) to the Gravatar service to show your profile picture, if you have one. Gravatar’s privacy policy is at automattic.com/privacy. Legal basis: your consent when you submit the comment (Article 6(1)(a)).
Messages. If you contact me, I use your contact details and message only to reply.
Cookies
The site only sets cookies that are strictly necessary for security or that you choose yourself:
- Security cookies with randomly generated names: set by the site’s security protection to tell real visitors apart from bots and automated attacks (24 hours).
sc_clearance: set by the hosting firewall after the browser check (24 hours).- Comment cookies: if you choose to save your details when commenting, WordPress remembers your name, email and website for your next comment (1 year).
The site uses no advertising, analytics or third-party tracking cookies. Visit statistics are collected without cookies. Because no cookies require consent, the site does not show a cookie banner.
Third-party services
- Simply.com (Denmark) hosts the site and its firewall.
- WordPress.org may serve emoji images on some pages, which means your browser requests them from WordPress.org’s servers.
- Gravatar (Automattic) shows profile pictures next to comments.
Links in posts to other sites, such as Microsoft Learn, are covered by those sites’ own privacy policies.
How long I keep data
- Comments stay published until you ask me to remove them or I delete them.
- Visit statistics and security logs are kept for as long as the plugins’ settings define, and I delete old records periodically.
- Messages are kept as long as needed to handle your request.
Your rights
Under the GDPR you can ask to see the data I hold about you, correct it, delete it, restrict or object to how I use it, or receive a copy. Contact me through the contact page and I’ll respond within one month.
If you think I handle your data incorrectly, you can complain to the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.
Changes
If I change how the site handles personal data, I’ll update this page and the date at the top.