This site sets no cookies, loads no scripts or resources from other sites, and has no forms, comments or subscriptions. The only processing of personal data is the one every web server does on its own: the request log. This page says what stays, for how long and why.
What stays on the server
For every request the server (Nginx) writes one line in the access log: the IP address the request comes from, date and time, the page requested and the outcome, the referring page if the browser sends it, and the string the browser identifies itself with (the user agent). It is Nginx's default format, with nothing added.
The purpose is twofold: keeping the server safe, that is noticing intrusion attempts and abuse, and knowing whether the pages are read. The legal basis is the legitimate interest of whoever runs a site in doing these two things (Regulation 2016/679, Article 6(1)(f)).
Log lines are kept for thirty days, then deleted.
Counting visits
Once a day a program reads the log and turns it into aggregate numbers: page views, visitors per day, referring sites, feed fetches and, for the feed, the names of the programs that read it. Visitors within a day are told apart by a fingerprint computed from address, user agent and date together with a secret value that lives only on the server: the address is not kept, and one day's fingerprint cannot be linked to the next day's. The aggregate history is permanent and contains no addresses.
When a number does not add up, the log is read by hand, on the server, with the address replaced by that same fingerprint.
Protecting the server
Addresses that make repeated attempts at administrative access (SSH) are blocked for one hour. This concerns whoever tries to get into the server, not whoever reads the pages.
Where the data is, and who handles it
The server is a hosting service by Aruba, in Italy. No data is transferred, sold or disclosed to anyone; the hosting provider handles it on behalf of whoever publishes. The data controller is whoever publishes this site under the name liberlume.
What there is not
No cookies, of any kind, and therefore no banner. No JavaScript. No fonts, images or other resources loaded from other sites: the visitor's browser talks only to this server. No forms, comments, subscriptions, advertising, profiling. The RSS feed is a file like any other.
Visitors' rights
Visitors have the rights set out in Articles 15 to 22 of the Regulation: access, rectification, erasure, restriction, objection. One practical limit applies: within thirty days the log lines exist, after that they do not, and in the aggregate statistics no number concerns a person.
Page written in November 2026.