Legal notice & privacy

Legal notice

Information pursuant to § 5 DDG (German Digital Services Act)

Günther Nuyken
Berliner Str. 39
58675 Hemer
Germany

Responsible for content under § 18 (2) MStV: Günther Nuyken, address as above.

Liability for content and links

The content of this site was created with care. I accept no liability for its accuracy, completeness or timeliness. External links were checked at the time of linking; I have no influence over their content.

Copyright

Texts, graphics and code on this site are subject to German copyright law. Where stated, the source code of the projects is available on GitHub under the MIT license.

Privacy notice

In short: this site sets no cookies for visitors, uses no advertising services and stores no personal data of visitors – with the exceptions listed below (hosting, visit statistics, fixcopy, email and the sequencer on the homepage).

Controller

Günther Nuyken; see the legal notice for address and email.

Hosting (Cloudflare)

The site is delivered via Cloudflare Pages and Cloudflare Workers (Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany; parent company Cloudflare, Inc., USA). When a page is requested, Cloudflare processes technically necessary connection data (IP address, time, requested URL, user agent) to deliver it and to fend off attacks. The legal basis is Art. 6 (1) (f) GDPR. Cloudflare is certified under the EU-US Data Privacy Framework. I do not analyse any access logs myself.

Visit statistics (Cloudflare Web Analytics)

To see which pages are read and which links bring visitors here, I use Cloudflare Web Analytics. When delivering a page, Cloudflare adds a small script (static.cloudflareinsights.com). On each page view it reports the page address, the referring page (referrer), browser and device type, country and load times to Cloudflare. It sets no cookies, uses no local storage and builds no profiles across visits; I only see aggregated numbers. The legal basis is Art. 6(1)(f) GDPR, my legitimate interest in privacy-friendly visit statistics. If you do not want this, you can block the script with a content blocker; the site keeps working unchanged.

fixcopy

Texts, screenshots and files you send via fixcopy are stored encrypted at Cloudflare (texts in Workers KV, files in R2) until they have been picked up once, for 24 hours at most. A picked-up file then remains available via its download link for another 60 minutes. After that everything is deleted automatically. No record is kept of who sends or picks up anything; to prevent abuse, Cloudflare briefly counts pickup, sign-in and upload attempts per IP address (rate limiting). Only I can send files over 100 MB, after signing in; for that alone fixcopy sets a technically necessary session cookie (fc, 12 hours). Visitors never receive a cookie. Do not send anything that must not fall into the wrong hands – the pickup code is a convenience, not a security feature.

Solar·Live

The solar panel shows readings from my own photovoltaic system. No visitor data is collected; requests to the JSON endpoints are subject to the Cloudflare connection data mentioned above.

Sequencer on the homepage

If you enter your own text in the sequencer or play it, that text, the step pattern, the tempo, the selected sound and the page language are sent to my server and stored there, together with the country (as derived by Cloudflare from the IP), the user agent, the browser language setting, the page you came from, and a hash of the IP address that changes daily and allows no linking beyond that day. The IP address itself is not stored. The purpose is my curiosity about what visitors type into the gimmick. No cookies are set, no device characteristics are read and no profiles are built across visits. The legal basis is Art. 6 (1) (f) GDPR; the data is not passed on. If you do not want this, leave the text field untouched and do not press play – then nothing is transmitted.

Browser diagnostics and browser signature

All evaluations on the playground run exclusively in your browser. No values are sent to a server and none are stored.

Local storage

The site remembers your choice between light and dark design and between German and English in your browser’s localStorage (keys nk-theme and nk-lang). The sequencer on the homepage remembers your text, the step pattern, the tempo and the sound (nk-seq), the C64 game its best score (nk-c64-best), Klickbumm the difficulty and settings (nk-ms) and a local copy of the high score list (nk-hi-minen-*), Asteroiden the sound setting and a local copy of the high score list (nk-ast, nk-hi-asteroiden), Dreistufer likewise (nk-drei, nk-hi-dreistufer), the pinball tables Invasoren and Schafschiesser the sound setting and a local copy of their high score list (nk-flip, nk-schaf, nk-hi-*). MIDI PERFECT 5 stores setups under midiperfect5.*. Everything stays on your device and is not transmitted.

Klickbumm, Asteroiden, Dreistufer and the pinball tables Invasoren and Schafschiesser have a public high score list. If you enter yourself after a game, three initials of your choice (for Klickbumm, a name of your choice with at most 10 characters), the score, the date and the country (from the request to Cloudflare) are stored on the server. To curb abuse, a hash of the IP address is stored with each game as well; it changes daily and allows no linking beyond that day. The list only shows initials, score, date and country.

Fonts

The fonts Instrument Serif, Geist and Geist Mono are hosted on this server and loaded from here. Nothing is fetched from Google Fonts or other third parties.

Contact by email

If you write to me, I process your details in order to reply (Art. 6 (1) (b) or (f) GDPR). The mailbox is hosted at mailbox.org (Heinlein Hosting GmbH, Berlin). Messages are deleted as soon as they are no longer needed.

Your rights

Access, rectification, erasure, restriction, data portability and objection under Art. 15–21 GDPR, as well as lodging a complaint with a supervisory authority – for North Rhine-Westphalia: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

As of September 2026