Privacy policy
This policy explains what personal data is processed when you visit leani.dev, why, and what rights you have. The leani software runs on your own infrastructure; this policy covers only the website.
- No cookies, accounts, forms, or advertising.
- Cloudflare delivers the site and processes connection data to do so.
- Our own Umami server counts page views and a few clicks without cookies or stored IP addresses, and you can opt out.
Controller
Smart-Byte GmbHLandshuter Str. 29, 85435 Erding, Germany
Managing director: Mario Heubach
Email: [email protected] · Phone: +49 8122 5676-141
Full provider details are in the legal notice.
Hosting and delivery
leani.dev is a static website served by Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. To deliver pages and protect the site against attacks, Cloudflare processes what your browser sends with every request: your IP address, the requested address, date and time, the referring page, your browser and operating system, and technical connection data.
- Legal basis: our legitimate interest in delivering the site securely and reliably (Art. 6(1)(f) GDPR).
- Processor: Cloudflare processes this data on our behalf under a data processing agreement (Art. 28 GDPR).
- Transfer to the USA: Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, which the European Commission has found to provide adequate protection (Art. 45 GDPR).
- Retention: we don't keep these request logs ourselves; Cloudflare keeps them only as long as delivery and security require.
Analytics with Umami
We count page views with Umami, open-source analytics that we run ourselves at analytics.smart-byte.com on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, located in Finland. Hetzner processes this data on our behalf under a data processing agreement (Art. 28 GDPR); nobody else receives it. When a page loads, and when you use one of a few controls, a small script sends:
- the page's address, without query string or fragment, and its title;
- the website you came from, which browsers usually share only as a domain;
- which control you used, such as copying a command, switching an example tab, or following a link to GitHub;
- your browser, operating system, device type, screen size, and language;
- your approximate location (country, region, and city), looked up from your IP address on our server.
Umami sets no cookies and stores nothing on your device. It does not store your IP address: to tell visits apart, it derives a pseudonymous identifier from your IP address, your browser's user agent, and a salt that changes every day, so visits cannot be linked across days. We look at the results only in aggregate, to see which pages help and what to improve. We don't build profiles or combine this data with anything else.
- Legal basis: our legitimate interest in understanding how the site and its documentation are used (Art. 6(1)(f) GDPR).
- Retention: analytics records are deleted after 13 months.
- Your choice: Umami doesn't count browsers that send Do Not Track, and you can turn it off for this browser below.
Data stored in your browser
The documentation remembers your color theme in your browser's local storage under starlight-theme. If you opt out of analytics, umami.disabled is stored there too. Both stay on your device and are never sent to us. They are strictly necessary for functions you use (§ 25(2) No. 2 TDDDG), so no consent is needed; you can delete them anytime in your browser settings.
When you email us, we process your email address, your message, and anything you include, to answer you. The legal basis is Art. 6(1)(b) GDPR if your message concerns a contract or its preparation, and otherwise our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR). Our email runs on Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which processes it on our behalf under a data processing agreement. Google may process data in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. We delete correspondence once it is resolved, unless commercial or tax law requires us to keep it (up to six or ten years under § 257 HGB and § 147 AO).
Links to other websites
The site links to GitHub, npm, Homebrew, ethPandaOps, blobs.money, and smart-byte.com. Your browser contacts those sites only when you follow a link, and their privacy policies apply there.
Your rights
You have the right to access your personal data (Art. 15 GDPR), to have it rectified (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), and to data portability (Art. 20). Write to [email protected]. Because we store no IP addresses and no identifiers tied to a person, we usually cannot link analytics records to you.
Right to object (Art. 21 GDPR). Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. For analytics, the switch above takes effect immediately in this browser.
You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
Other information
You don't have to provide personal data. Without the connection data your browser sends, the site cannot be delivered; analytics is optional. We don't use automated decision-making or profiling (Art. 22 GDPR). We update this policy when the site or the law changes.
Last updated: 30 September 2026