Privacy Statement

I work with data for a living, and I have spent enough time inside warehouses full of other people's personal information to take this seriously. I do not like my own data being treated as a commodity, traded and recombined somewhere I cannot see, and I am not going to do that to anyone who visits here. This site gathers as little as it can while still telling me which articles are worth writing. It sets no cookies, builds no profiles, sells nothing, and keeps what little it gathers inside the EU. The sections below spell out exactly what that means.

Last updated: 21 May 2026

Who is responsible

This website, databram.nl, is run by Bram Durieux, based in the Netherlands. If you have a question about this statement or about the data this site processes, you can reach me through the contact page.

What this site collects

I use PostHog to understand which articles are read and how far people get through them. It is configured in a privacy-friendly, cookieless way, which means it does not place cookies on your device, does not store a persistent identifier in your browser, and does not track you across other websites. There is no session recording and no advertising.

The analytics collect a limited set of information for each page you visit:

  • the page you viewed and the page that referred you to it;
  • how long you stayed on a blog post and how far down you scrolled;
  • your browser and device type, and an approximate region derived from your IP address.

Because the analytics run without a persistent identifier, this information cannot be tied back to you as a returning visitor or combined into a profile.

Why there is no cookie banner

The analytics are configured to align with the Dutch Data Protection Authority's criteria for consent-exempt analytics: no cookies, minimal personal data, no data sharing for other purposes, and a processing agreement with the provider. Under those conditions a consent banner is not required. If that configuration ever changes in a way that places cookies or builds a profile, this statement will be updated and consent will be requested first.

Who processes the data, and where

Analytics data is processed by PostHog on my behalf, on their European infrastructure (eu.i.posthog.com), so it stays within the EU. PostHog acts as a processor and does not use the data for its own purposes.

The site itself is hosted on GitHub Pages. Like any web host, GitHub processes standard request data, including your IP address, to deliver the pages and keep the service secure.

Retention

Analytics data is kept only as long as it is useful for understanding how the site is read, and is then removed in line with the retention settings configured in PostHog. No data is sold, and none of it is used for advertising.

Your rights

Under the GDPR you have the right to access, correct, or erase personal data held about you, and to object to its processing. Because this site stores no persistent identifier, there is usually nothing that can be linked back to an individual visitor, but if you believe data relating to you is being processed you can ask about it through the contact page.

You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.