Privacy Policy

Last updated: November 28, 2025
Website: https://articles.demosaic.org

I. Information about us as controllers of your data

The party responsible for this website (the “controller”) for purposes of data protection law is:

The DeMosaic (articles.demosaic.org)
Operated by: Private individual blogger
Email: [email protected]

This website is a personal blog built using Ghost, used solely for publishing original essays and reflections. The author also shares selected works via Substack and Medium.

II. The rights of users and data subjects

In accordance with applicable data protection laws (including the EU GDPR, where relevant), users have the following rights:

Right to access: You can request confirmation about whether and how your data is being processed.
Right to correction: You can request correction of inaccurate or incomplete personal data.
Right to deletion (“right to be forgotten”): You can request that your data be deleted when it is no longer needed.
Right to restriction: You may request limited processing under certain conditions.
Right to data portability: You can request copies of your data in a structured, machine-readable format.
Right to object: You can object to processing of your data.
Right to file a complaint: If you believe your data has been misused, you can contact the relevant supervisory authority or the site operator directly.

To exercise these rights, please contact [email protected].

III. Information about the data processing

General note

Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.

Cookies

The DeMosaic operates with a “Privacy First” philosophy. We do not use cookies for tracking, analytics, or advertising purposes.

No Analytics Cookies: We use cookieless analytics solutions (Umami) that do not store information on your device.
Essential Functionality: Cookies are used only when strictly necessary to provide the services you request (e.g., maintaining your session when you log in as a member or administrator). These technical cookies are vital for site security and functionality, are not used for tracking purposes, and are exempt from consent requirements.

Server log data

For technical reasons, the web server automatically collects certain data transmitted by your browser. This includes:

Browser type and version
Operating system
Referrer URL (the page from which you came)
Pages visited on The DeMosaic
Date and time of access
IP address

This data is temporarily stored to ensure the stability and security of the website (e.g., to prevent DDoS attacks) and is deleted automatically (typically within 7 days) unless further storage is needed for security investigation.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure website operation).

Web Analytics (Privacy-Preserving)

To improve our content and understand our audience, we use Umami. This service is configured to be cookieless and compliant with strict privacy standards (GDPR, CCPA, PECR). We do not track you across other websites, and we do not collect personal profiles.

Legal basis: Art. 6(1)(f) GDPR (Legitimate Interest).

Our legitimate interest is to analyze the use of our website to improve its design and content without infringing on the privacy rights of our users.

Umami

We use Umami, an open-source, privacy-focused web analytics solution.

No Cookies: Umami does not use cookies to track users.
No Personal Data: It does not collect any personally identifiable information (PII).
Data Minimization: All data collected is anonymized. IP addresses are used momentarily to determine the country/region of the visitor and are then immediately discarded or hashed irrecoverably.
Ownership: The analytics data is owned by The DeMosaic and is not shared with third-party advertising networks.

The DeMosaic may share writing updates or essays via Substack or Medium, both of which have their own independent privacy policies.

If you subscribe to updates through these platforms, your data (e.g., email address) is collected and processed directly by the respective provider, not by The DeMosaic.

Substack
Substack Inc., 111 Sutter Street, 7th Floor, San Francisco, USA
Privacy Policy: https://substack.com/privacy

Medium
A Medium Corporation, 799 Market St 5th Floor, San Francisco, USA
Privacy Policy: https://help.medium.com/hc/en-us/articles/213481328-Medium-Privacy-Policy

Legal basis: Art. 6(1)(a) GDPR (consent).
You can unsubscribe anytime using the link in each newsletter or by contacting the platform directly.

Embedded content and external links

External Links
The DeMosaic frequently contains links to external sites such as Medium, Substack, GitHub, and X (Twitter). Clicking these links will direct you to the third-party site. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Embedded Content
Articles on this site may include embedded content (e.g., YouTube videos, Spotify players, Tweets, or images). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website directly. These third-party websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.

Legal basis: Art. 6(1)(f) GDPR.

Our legitimate interest involves enriching the reading experience by providing relevant multimedia content and external resources.

Data security

We take reasonable technical and organizational measures to protect your data from loss, misuse, or unauthorized access (e.g., SSL/TLS encryption). However, data transmission over the internet can never be fully secure, and you share data at your own risk.

Changes to this privacy policy

This policy may be updated periodically to reflect new technologies or legal requirements. The latest version will always be available at https://articles.demosaic.org/privacy.