Privacy policy
Last updated: 2026-08-24
The short version. This site sets no cookies, runs no analytics, shows no advertising and loads nothing from other companies’ servers — no fonts, no scripts, no images from elsewhere. Nobody is tracked and no profile is built. The only data that arises is the technical log our hosting provider keeps of every request, and one entry your own browser stores locally if you confirm the notice on the front of each page.
1. Who is responsible
The controller for data processing on this website within the meaning of Article 4 (7) of the General Data Protection Regulation (GDPR) is:
Lukas Barton
Am Fuhrpark 23
58507 Lüdenscheid
Germany
Email: contact@orphanspec.com
No data protection officer has been appointed; the conditions of Article 37 GDPR and § 38 of the German Federal Data Protection Act are not met for a site of this kind.
2. What happens when you open a page
This site consists of static files. There is no database behind it, no login, no shopping basket and no contact form. Opening a page does, however, mean your browser contacts our hosting provider’s server, and that server records the request in a technical log. The following data is involved:
- your IP address
- date and time of the request
- the address of the page requested
- the referring page, if your browser sends one
- browser type, version and operating system
- the amount of data transferred and the status of the request
Purpose and legal basis. This data is necessary to deliver the page to you at all, and to keep the service stable and secure — for example to recognise and block attacks. The legal basis is Article 6 (1) (f) GDPR. Our legitimate interest is the technically sound and secure operation of the site. This data is never used to identify individual visitors, is not combined with any other data source, and is not used to build profiles.
Storage period. We do not download, receive or store these logs ourselves. They are held by our hosting provider for a short period for the purposes above and are then deleted or aggregated into anonymous statistics.
3. Hosting
This site is hosted on the network of:
Cloudflare, Inc.
101 Townsend St
San Francisco, CA 94107
USA
Cloudflare delivers the pages and, in doing so, processes the access data described in section 2 on our behalf as a processor under Article 28 GDPR. Because Cloudflare is based in the United States, data may be transferred outside the European Economic Area. That transfer is covered by the European Commission’s Standard Contractual Clauses; Cloudflare additionally states that it participates in the EU–U.S. Data Privacy Framework, for which the European Commission has issued an adequacy decision under Article 45 GDPR. Cloudflare also uses the access data to protect its own network against attack, and acts as controller in its own right for that purpose.
4. Storage on your own device
This site sets no cookies.
Every page carries a notice about the limits of the data shown, with a button to confirm you have read it. If you press that button, your browser stores a single entry in its local storage:
- Name: osp-ack
- Content: the value 1 — nothing else, no identifier, no date, nothing that could relate to you as a person
- Purpose: so the notice appears as a single line instead of the full text on the next page you open
- Duration: until you clear your browser storage
This entry never leaves your device — it is not transmitted to us or to anyone else, and we cannot read it. Storing it is strictly necessary to provide the function you asked for by pressing the button, so it requires no consent under § 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). You can delete it at any time in your browser settings; the site works normally without it, and the notice simply stays expanded.
5. What this site does not do
Stated explicitly, because it is unusual:
- no web analytics of any kind — no Google Analytics, no self-hosted alternative, no counting pixels
- no advertising and no advertising networks
- no social media buttons or embedded posts
- no external fonts, scripts, style sheets, videos or maps — every file the page loads comes from this site’s own address
- no newsletter, no user accounts, no comment function
- no automated decision-making and no profiling within the meaning of Article 22 GDPR
If this ever changes — the most likely case being links to retailers that earn a commission — this policy will be updated before the change goes live, and any such link will be clearly labelled as advertising on the page where it appears.
6. Links to other sites
Some pages link to the source of a manual or to other outside sites. Once you follow such a link, the site you arrive at decides what it collects; this policy no longer applies. We have no influence over it and no knowledge of what data is transmitted there. Links are marked so that your browser passes on as little information as possible, but you should read the privacy policy of any site you visit.
7. Your rights
You have the following rights regarding personal data relating to you:
- Access (Article 15 GDPR) — to be told whether data about you is processed, and if so, which
- Rectification (Article 16 GDPR) — to have inaccurate data corrected
- Erasure (Article 17 GDPR) — to have data deleted
- Restriction (Article 18 GDPR) — to have processing limited instead of deleted
- Data portability (Article 20 GDPR) — to receive your data in a machine-readable format
- Objection (Article 21 GDPR) — to object at any time, on grounds relating to your particular situation, to processing based on legitimate interests, which is the basis relied on in section 2 above
To exercise any of these, write to contact@orphanspec.com. In practice we hold almost nothing about you: we do not receive the server logs, and there is no other store of visitor data. A request for access will usually be answered to that effect, and we will tell you how to approach the hosting provider directly if you want the log data itself.
8. Right to complain to a supervisory authority
Without prejudice to any other remedy, you have the right under Article 77 GDPR to lodge a complaint with a data protection supervisory authority — in particular in the EU or EEA member state of your habitual residence, your place of work, or the place of the alleged infringement. A list of the German supervisory authorities with their addresses is published by the Federal Commissioner for Data Protection and Freedom of Information.
9. Changes to this policy
This policy is updated when the site changes in a way that affects it — for example if commission links are added. The date at the top always shows the current version. There is no notification mechanism, because we hold no address to notify.