Privacy
Minimal data.
Clear paths.
How this personal website and email correspondence handle personal data.
Last updated: 18 September 2026
Controller and contact
Bar Avraham Anigar
Vienna, Austria
anigarbar@gmail.com
Visiting the website
Content is delivered as static pages. The website includes no analytics or advertising software, tracking pixels or externally loaded fonts. Its own page code creates no cookies or browser-storage entries. There is no visitor registration or comment system.
A page request transmits necessary connection data such as IP address, time, requested URL, and browser and device information to the hosting service. The purpose is secure, reliable delivery of the website. The legal basis is Article 6(1)(f) GDPR: the legitimate interest in providing and securing this information resource.
Hosting and technical providers
Hosting is provided through ChatGPT Sites by OpenAI Ireland Ltd, with delivery through Cloudflare. Further subprocessors are identified in the linked list. Processing of website data on my behalf is covered by the ChatGPT Sites Data Processing Addendum. Necessary hosting security mechanisms may also process connection data.
ChatGPT Sites · Data Processing Addendum
OpenAI · Subprocessors
OpenAI · Privacy policy
Hosting cookies
Even though the page code creates no cookies, the hosting service can set them directly when delivering a page. The following cookies were observed in a test without sign-in on 18 September 2026. Cookie lifetimes describe browser storage, not retention of associated data by the provider.
__cf_bm · Cloudflare
Cloudflare documents this cookie as protection against malicious automated traffic. It expires after 30 minutes of inactivity.
cf_clearance · Cloudflare
Cloudflare documents this cookie as storing the result of a security check so that it need not be repeated on every request. Its lifetime depends on the hosting configuration; a specific duration for this website has not yet been verified.
__Host-appgarden-visitor · ChatGPT Sites / OpenAI
Was set with the first page response. In the test, its lifetime was 90 days and was renewed on subsequent page requests. Its exact purpose, server-side retention and any consent requirement are being clarified with OpenAI. This notice therefore does not classify it as strictly necessary.
In Austria, storing or accessing cookies is governed by § 165(3) TKG 2021. An exception to prior consent applies in particular where a cookie is strictly necessary to provide a service explicitly requested by the user. A privacy notice alone does not replace any required consent.
The hosting provider’s response is still pending. These details will be updated when further information is available.
Cloudflare · Cookie documentation
OpenAI · Cookie policy
Austrian Data Protection Authority · Cookies
Preparing a message on your device
The contact-page input does not submit a message to a website server. It prepares text on your device. Your email app sends the email only when you choose to send it there. Copying writes the text to your clipboard. Reloading the page discards the input.
When you email me
I process your email address, any name you provide, your message and associated correspondence data to answer your enquiry and continue the conversation. The legal basis is Article 6(1)(f) GDPR: my legitimate interest in responding to technical and professional enquiries you initiate. Providing this information is voluntary; a contact address is needed for a reply. Please do not send credentials or confidential project records.
Email is received through Gmail, provided by Google Ireland Limited. Messages are therefore also processed in Google’s email infrastructure. Google’s own processing is described in its privacy policy.
Processing outside the EEA
OpenAI and Google may process data outside the European Economic Area, including in the United States. OpenAI specifies adequacy decisions or EU standard contractual clauses for such transfers. Google describes its applicable transfer mechanisms in the linked information, including the safeguards used.
Google · Legal frameworks for data transfers
Retention
The website does not store contact drafts on a server. I retain received correspondence for as long as needed to handle the enquiry or an ongoing exchange. Once that purpose ends, it is deleted unless legal obligations or the establishment, exercise or defence of legal claims require further retention. Hosting data is processed for the necessary duration of providing and winding down the hosting service; the Sites agreement then provides for return or deletion on instruction, subject to legal retention requirements. This does not specify the lifetime of each access log. Deletion in Google’s systems, including backups, follows the procedure linked below.
Google · Data retention and deletion
Your rights
Subject to the legal conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Please send requests to the email address above. This website does not use automated decision-making or profiling.
You may also complain to a data protection supervisory authority, including the Austrian Data Protection Authority.