zer0fur.me is a private, non-commercial personal website. It does not use analytics, visitor tracking, advertising cookies, or embedded third-party content.
The site provides links to my social profiles, email contact, and a public guestbook. Text-only entries appear immediately. Entries containing an image stay private until I approve them. You can request removal at privacy@zer0fur.me.
The person responsible for this website and for personal data processed directly through it is:
Georg Riedler (Zer0)
Thurgau, Switzerland
Privacy contact: privacy@zer0fur.me
This Privacy Policy explains how personal data may be processed when you visit zer0fur.me, use the guestbook, or contact me by email.
The website is operated from Switzerland. This Privacy Policy is intended to provide transparency under the Swiss Federal Act on Data Protection (FADP / DSG). Where the EU General Data Protection Regulation (GDPR) applies, the relevant GDPR information and rights are also described below.
The website is hosted by 24fire on infrastructure located in Germany.
Server access and error logs record technical request information, including IP addresses, times, requested URLs, response status, and browser information where included in the log format. These records support delivery, security and troubleshooting; they are separate from the guestbook's pseudonymous moderation records.
Access and error logs rotate weekly, keeping four and ten archived files respectively, alongside the current files. This is a rotation schedule, not an exact deletion deadline. The hosting provider also processes connection and infrastructure data to operate and secure the VPS. Uploads are resized on this VPS and stored in its database in Germany. If you separately agree to Telegram previews, a smaller preview and the entry's name, message and tags are also sent to Telegram for private moderation, as explained in section 7.
Cloudflare, Inc. (United States) is used for DNS services only. The Cloudflare proxy/CDN is not enabled for this website, so normal website traffic is not intentionally routed through Cloudflare's reverse proxy.
DNS resolution sends queries and related connection information to Cloudflare's DNS infrastructure. Those queries generally come from your DNS resolver; Cloudflare does not receive guestbook submissions or image contents through the DNS-only configuration. Cloudflare operates globally, including in the United States; see its privacy information below.
More information: Cloudflare Privacy Policy.
This website does not use analytics or visitor tracking services. No Google Analytics, Matomo, Plausible, Umami, or similar analytics service is used.
The public website does not intentionally set cookies and does not use advertising or behavioural tracking technologies.
The website provides a normal mailto: link. If you choose to
contact me by email, I receive the information that you voluntarily send,
such as your email address, message content, and any attachments. This
information is used to read and respond to your message and for necessary
follow-up communication.
Email correspondence is retained only for as long as reasonably necessary for the conversation or purpose for which you contacted me, unless a longer period is required for technical, legal, or security reasons.
Where the GDPR applies, email correspondence is generally processed on the basis of my legitimate interest in communicating with people who contact me (Article 6(1)(f) GDPR), unless another legal basis applies in a particular situation.
The guestbook needs no account. A text-only entry publishes your chosen name, message and submission time immediately. Use a nickname and avoid sensitive information. If you attach an image, the entire entry is held privately for my review. Only after I approve it are its name, message, tags, time and image available to everyone, including search engines and people who can copy them. Moderation is carried out by the operator using a restricted moderation area or a private Telegram bot chat.
Images are optional. Before uploading, confirm that you have the necessary rights, agree to publication after review, and have publication permission from recognisable people, with appropriate guardian permission for children. Do not upload identity documents, intimate images or other sensitive personal information. Approval by the operator does not replace the depicted people's permission or the copyright holder's rights.
Uploaded images are resized and embedded metadata, such as EXIF/GPS information, is removed before storage. The original upload is processed temporarily; its original file and filename are not retained by the application. The database stores the processed image, optional tags, review status, separate Telegram-preview consent choice, consent confirmation time and privacy-notice version. Removing metadata does not remove personal details visible in the image.
Image entries can include optional tags, for example an event or convention name. Tags stay private with a pending entry and become public after approval. Tags on approved, visible entries are used for guestbook filtering and recommendations based on recent public usage counts. Avoid tags that reveal private or sensitive information. Tags are kept with their entry and deleted when it is deleted; hidden and pending entries do not contribute to public tag lists or recommendations.
When the bot is enabled, a separate unchecked box lets you agree to a private moderation transfer of your chosen name, message, tags and a resized image preview to Telegram. The purpose is to let the operator review and approve or reject your entry. You must also have permission for this transfer from the recognisable people depicted. Declining does not prevent an image submission: the bot receives only a request number and a private review link, with no visitor name, message, tags, image, IP address or user agent. Historical entries without this separate consent are not sent as previews.
Telegram bot conversations are cloud chats, not end-to-end encrypted. Telegram's group includes entities in the British Virgin Islands and the United Arab Emirates (Dubai). Processing outside Switzerland/EEA can involve different protections and more difficult enforcement of privacy rights. Telegram's own processing and locations are described in its Privacy Policy. The preview transfer requires your separate express consent; you may withdraw it for the future by contacting privacy@zer0fur.me. You do not need a Telegram account to use the guestbook.
Telegram receives the request reference, the operator's bot/chat identifiers and review status information. The application keeps delivery and review references to operate the moderation service reliably. It requests deletion of a review message after a decision or after 24 hours, while the bot is running. Pending entries can also be reviewed through the site's moderation area. Deletion through Telegram is best effort: outages, service limits or unconfirmed deliveries can leave copies requiring manual removal. Local resolved notification references are removed after successful cleanup and at most 30 days after resolution once the matching request is no longer pending. Telegram copies, downloads or screenshots are not erased by deleting the site's database entry alone.
To prevent spam and abuse, the application uses a pseudonymous identifier derived from the IP address and browser information (user agent). This is personal data and is not guaranteed to be anonymous. The guestbook database does not store the raw IP or user agent, but proxy logs are separate (section 3). Moderation records include submission attempts and any temporary restrictions, their reasons and expiry times. Protective measures may reject a submission or temporarily restrict posting. Contact me if you believe a rejection or restriction is mistaken.
To request removal, withdraw image-publication consent, correct an entry, or report an image of you, email privacy@zer0fur.me with the entry's name, date or link. I may request the minimum additional information needed to identify the entry or verify your request. Removal stops further access through this site, but cannot recall copies already downloaded or cached by others. Manual whole-server backups are made on demand and can contain earlier guestbook data. They remain until manually deleted and do not follow the application's automatic cleanup periods. Deleting an active entry does not itself erase those copies. Contact me about removal from the active site and any remaining backup copies.
Under Swiss law, this processing serves the stated guestbook and security purposes, respecting proportionality and privacy rights. Image publication relies on the permissions described above. Where the GDPR applies, image publication is based on consent (Article 6(1)(a)); operating and protecting the guestbook relies on legitimate interests (Article 6(1)(f)), subject to the applicable rights and balancing of interests.
zer0fur.me contains ordinary external links to third-party services. These services are not embedded into the website. Simply viewing this page does not intentionally load social-media widgets or content from them.
Examples of linked services include:
When you click one of these links, you leave zer0fur.me and connect directly to the relevant third-party service. That provider may then process personal data such as your IP address, account information, device information, cookies, or usage data according to its own privacy policy. I do not control that processing.
I do not sell, rent, trade, or commercially share visitor personal data. The website is private and non-commercial.
The website operator is located in Switzerland and the website is hosted in Germany, which is part of the European Economic Area. Optional Telegram preview transfers are separately described in section 7, including the recipient, overseas processing risks, consent choice and withdrawal route.
If you choose to open an external service such as Bluesky, Discord, GitHub, PayPal, Telegram, or a Cloudflare-related service, the relevant provider may process data in countries outside Switzerland or the EEA. Such processing and transfers are governed by the provider's own privacy policy and applicable safeguards.
Depending on the applicable law and circumstances, you may have rights relating to your personal data, including the right to request information about processing, access your personal data, request correction of inaccurate data, and request deletion where the legal requirements are met.
Where the GDPR applies, you may additionally have rights to restriction of processing, data portability, and objection to certain processing. If processing is based on consent, you may withdraw that consent for the future.
To exercise a privacy right or ask a privacy-related question, contact privacy@zer0fur.me.
In Switzerland, you may contact the Federal Data Protection and Information Commissioner (FDPIC) for information about Swiss data protection law: edoeb.admin.ch.
Where the GDPR applies, you may also have the right to lodge a complaint with a competent data protection supervisory authority in the EU/EEA.
Technical and organisational measures are used to protect personal data and operate this website securely. Detailed operational security settings are not published. No internet transmission or online system can be guaranteed to be completely secure.
This Privacy Policy may be updated if the website, hosting setup, linked services, or applicable legal requirements change. The current version is the version published on this page together with the "Last updated" date shown above.