Privacy policy

This notice explains what personal data may be processed when you visit sovereignwebstack.eu or contact the project.

Last updated: July 6, 2026

Controller

Scope

This policy covers the public Sovereign Web Stack website. The site does not provide user accounts, paid subscriptions, newsletters, comment forms, or affiliate links. Project submissions happen in the separate GitHub repository and are governed by GitHub's own privacy terms when you use GitHub.

Hosting and security logs

The site is served from AWS infrastructure behind CloudFront. When you request a page, the hosting infrastructure may process technical request data such as IP address, requested URL, timestamp, user-agent, referrer, and security-related metadata. This is used to deliver the site, keep it reliable, detect abuse, and troubleshoot operational issues.

Analytics

Sovereign Web Stack uses HitKeep from the EU cloud endpoint to understand aggregate site usage and improve the directory. The tracker is configured without advertising networks, affiliate tracking, or sponsored conversion tracking.

The site may send technical performance metrics and selected interaction events, including source-repository clicks and directory filter changes. Directory filter events can include the search text and category selected in the local directory interface. Do not enter sensitive personal data into the directory search field.

Contact requests

If you contact the project by email, the submitted address, message content, and related email metadata are processed so the request can be answered and, where necessary, documented.

Legal bases

Where the GDPR applies, processing is generally based on legitimate interests in operating, securing, measuring, and improving a public-interest directory; on taking steps requested by you when you contact the project; and on legal obligations where retention or disclosure is required by law.

Retention

Operational and analytics data is kept only as long as reasonably needed for site operation, security, troubleshooting, and aggregate research. Contact emails may be retained while the request is active and for a reasonable period afterward if needed for accountability or follow-up.

External links

The site links to external project websites, source repositories, policy materials, and evidence documents. Opening those links may disclose your visit to the external provider and is governed by that provider's privacy notice.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to withdraw consent where processing is based on consent. To exercise privacy rights, contact mail@pascalebeier.de.

Changes

This policy may be updated when the site's infrastructure, analytics setup, or legal requirements change. The latest version will be published on this page.