Datenschutzerklärung for tychat.io under Article 13 of the General Data Protection Regulation (GDPR).
Short version. Reading this site needs no account and sets no cookies. GitHub hosts the pages and receives your IP address when you open one. I run no analytics, and no page requests anything from another company when it loads. The copy button on the lesson pages uses your browser's clipboard and sends nothing.
Verantwortlicher under Article 4(7) of the GDPR: Stefan Coetzee, Wilhelmstraße 74, 38100 Braunschweig, Germany. Email: stefan@uncovertechtalent.com. The same details are in the Impressum. This notice covers tychat.io. machinebehavior.io and uncovertechtalent.com have their own notices.
tychat.io is hosted with GitHub Pages by GitHub, Inc., San Francisco, USA. When you open a page, GitHub receives your IP address and the details of your request and sends the page back. GitHub's documentation says that it logs and stores the IP address of every visitor to a GitHub Pages site for security purposes, whether or not the visitor is signed in to GitHub. Neither the documentation nor the GitHub Privacy Statement says how long GitHub keeps these logs. GitHub handles this data under its Privacy Statement.
GitHub delivers Pages through a content delivery network run by Fastly, which GitHub lists as a subprocessor for a content delivery service in the United States. On 2026-10-19 the response headers of this site named Fastly and showed an edge location in Frankfurt for a request from Germany.
I use GitHub Pages to publish this site. The legal basis is my legitimate interest in publishing it (Article 6(1)(f) GDPR). I run no visit statistics and keep no log of visitors.
The name servers of tychat.io run on Amazon Route 53, operated by Amazon Web Services. When your device looks up the address of this site, your resolver asks them.
The pages of this site set no cookies and load no analytics, advertising, or tracking code. No page requests a script, font, image, or stylesheet from another company when it loads. On 2026-10-19 I scanned every HTML, CSS, and JavaScript file of the site for requests to other hosts and for cookie and storage calls. It found none.
Pages link to machinebehavior.io and uncovertechtalent.com, which are my sites with their own notices, and to GitHub (the source repository and a plain-text mirror of the lessons) and Substack. Nothing is sent to them before you click. When you click, your browser connects to that site and its own privacy notice applies. Your browser may tell that site which page you came from.
The lessons ask you to paste one line into a chat. When you do, the provider of that chat receives your message under its own privacy notice. If the chat then opens a link from the line, the request to this site comes from that provider, not from you. This site is not involved in the rest of the conversation.
If you write to stefan@uncovertechtalent.com, I receive your address, the message, and the time you sent it. I use them to answer you. The legal basis is Article 6(1)(f) GDPR, my interest in answering the people who write to me, and Article 6(1)(b) where you ask about a contract. I keep the message as long as I need it to handle your request, and longer only where a legal retention duty applies. Mail for this address is handled by Google (the MX records of uncovertechtalent.com point to smtp.google.com). Google LLC is on the Data Privacy Framework List.
The European Commission found that the United States ensures an adequate level of protection for organisations on the Data Privacy Framework List (Implementing Decision (EU) 2023/1795, Article 1). Statuses below were read on that list on 2026-10-19.
| Recipient | Role | Safeguard for transfers to the USA |
|---|---|---|
| GitHub, Inc. (USA), listed as "GitHub": hosting with GitHub Pages | Host | EU-U.S. Data Privacy Framework, status Active. GitHub's Privacy Statement also names the Standard Contractual Clauses. |
| Fastly (USA): content delivery for GitHub Pages | Subprocessor of GitHub | Engaged by GitHub and named on its subprocessor list. |
| Amazon Web Services EMEA SARL (Luxembourg) with Amazon Web Services, Inc. (USA): Route 53 name servers | Processor (Article 28) | EU-U.S. Data Privacy Framework: Amazon Web Services, Inc. is a covered entity of Amazon.com, Inc., status Active. The AWS Service Terms also include the Standard Contractual Clauses. |
| Google (mail for stefan@uncovertechtalent.com) | Processor | EU-U.S. Data Privacy Framework: Google LLC, status Active. |
I sell no data and pass none on for advertising.
| Data | Where | Kept |
|---|---|---|
| IP address and request details | GitHub, and Fastly for GitHub | Not stated by GitHub (section 2) |
| Visitor log of this site | None kept by me | Not applicable |
| Google mailbox | As long as needed to handle your request (section 6) |
You have the right to access your data (Article 15 GDPR), to have it corrected (Article 16), erased (Article 17), or restricted (Article 18), to receive it in a portable format (Article 20), and to object (Article 21). Where I process data under Article 6(1)(f), you can object at any time on grounds relating to your particular situation (Article 21(1)). Write to stefan@uncovertechtalent.com to use any of these rights.
I keep no log of visitors, so I hold no data about your visits that I could identify as yours. GitHub holds the logs described in section 2, and you can ask GitHub for them under its Privacy Statement. If I hold other data about you, such as an email, Articles 15 to 20 apply to it in full.
You have the right to lodge a complaint with a data protection authority (Article 77 GDPR), in particular in the Member State where you live, where you work, or where the alleged infringement took place. The authority responsible for me is Der Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany (postal address: Postfach 221, 30002 Hannover). Its complaint form is online.
Your browser sends your IP address and the details of your request because the technology needs them to deliver a page. Without them the page cannot reach you. No law and no contract requires you to give me any other data. I use no automated decision-making and no profiling (Article 22 GDPR).
This notice was last updated on 2026-10-19. I update it when the way this site handles data changes. The history of this page shows every version.