Privacy
This is a personal site. It has no accounts, no comments, no ads, no tracking pixels, and no advertising or data-broker relationships. The short version: I don’t know who you are, and I’d like to keep it that way.
The longer version, because I think people are owed specifics rather than reassurance:
Analytics
I use GoatCounter to count page views. It sets no cookies, collects no personal data, and doesn’t track you across sites or build a profile of you. It records the page you viewed, the referring site, roughly what browser and country you came from, and nothing that identifies you individually.
I look at it to see which posts people actually read. That’s the whole purpose. If you block it, the site works exactly the same — and honestly, a good chunk of visitors do block it, so the numbers undercount anyway.
Hosting
The site is served by Cloudflare Pages. Like any web host, Cloudflare processes your IP address and request headers in order to deliver the page and to protect the site from attacks. I don’t have access to a log of who visited. Cloudflare’s own privacy terms apply to that processing.
Fonts and assets
All fonts, images, and scripts are served from this domain. There’s no Google Fonts, no CDN calling home, no embedded third-party widget. Loading a page here doesn’t tell anyone else that you did.
If you email me, I have your email and whatever you wrote — same as any correspondence. Mail for this domain runs through Cloudflare Email Routing, which forwards it to my personal mailbox. I keep correspondence as long as it’s useful, I don’t add you to any list, and there is no list to be added to.
Embedded content
Posts occasionally link out to other sites. Those sites have their own privacy practices, and I have no control over them.
Your rights
If you’re in the EU/EEA, the GDPR gives you rights over your personal data: access, rectification, erasure, restriction, objection, and portability. Given the above, the only personal data I’m likely to hold is an email you sent me. If you’d like it deleted, ask and I’ll delete it.
Data controller: Nick Xifaras, Athens, Greece — info@ncxifaras.com.
If you think I’ve handled your data badly, please tell me first, but you also have the right to complain to the Hellenic Data Protection Authority (dpa.gr).
Changes
This page will change if what the site does changes. There’s no version history to point you at (the repository is private for security reasons) so if you’re relying on something here, take your own copy. If a change is material, I’ll say so in a post rather than quietly editing.