privacy policy

Pursuant to Regulation (EU) 2016/679 (GDPR) and D.Lgs. 196/2003 as amended · last updated 29 September 2026

The short version: vimtyper has no accounts and collects no personal data of its own, except what you choose to send through the feedback form (section 6). Its own cookies hold nothing but the settings you chose yourself (section 4). The site uses cookieless, aggregated visit statistics (see section 3) and shows ads provided by Google (see section 9); personalized advertising only happens with your consent.

1. data controller

Matthias Thaler, [Street and number], [ZIP] [City], Italy
Email: matthias.thaler@protonmail.com

2. hosting and server logs

This site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA ("Vercel"), acting as a processor. When you visit the site, Vercel automatically processes technical data required to deliver it: your IP address, date and time of the request, the requested URL, browser type and version (user agent), and referrer. This data is used solely to serve the site reliably and securely and is not combined with other data or used to identify visitors.

Legal basis: legitimate interest in operating and securing the website (Art. 6(1)(f) GDPR). Vercel may process data in the United States; transfers are safeguarded by Vercel's certification under the EU-U.S. Data Privacy Framework and standard contractual clauses. Details: vercel.com/legal/privacy-policy.

3. web analytics

The site uses Vercel Web Analytics, provided by Vercel (see section 2), to collect aggregated visit statistics: page views, referrers, approximate geolocation (country level), browser, operating system, and device type. This service sets no cookies and stores no identifiers on your device. Visits are counted using a temporary hash derived from the incoming request, which is discarded within 24 hours and cannot be used to track you across sites or over time. The operator only sees aggregated statistics, never data about identifiable individuals. Legal basis: legitimate interest in understanding overall site usage (Art. 6(1)(f) GDPR). Details: vercel.com/docs/analytics/privacy-policy.

4. cookies

The site sets first-party cookies for one purpose: remembering how you like it set up, so the page looks and behaves the same on your next visit. They hold settings only — no identifier, no account, no profile, nothing that follows you to another site. Cookies used for advertising are described in section 9.

They expire after two years, are set with SameSite=Lax, and are readable only by vimtyper.dev. Like all cookies they ride along with each request to this domain, but nothing on the server reads or evaluates them: the pages are static and every setting is applied in your browser. Earlier versions kept these values in localStorage; those are migrated into the cookie and removed on your first visit. You can delete all of it at any time by clearing your browser's site data for vimtyper.dev — the site falls back to its defaults.

5. fonts

All fonts are self-hosted and served from the same server as the site. No requests are made to Google Fonts or any other third-party font service when you visit.

6. feedback form

If you use the feedback form, your message is emailed to the operator together with the email address you optionally enter, the path of the page you came from, and your browser's user agent. Nothing is sent unless you submit the form. The email is delivered by Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA), acting as a processor, and then kept in the operator's mailbox only as long as needed to handle your feedback. Legal basis: legitimate interest in receiving and answering feedback, and your request if you ask for a reply (Art. 6(1)(f) and (b) GDPR). Resend may process data in the United States under the EU-U.S. Data Privacy Framework and standard contractual clauses. Details: resend.com/legal/privacy-policy.

7. your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interest. You also have the right to lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it). To exercise your rights, contact the address in section 1. Note that the operator stores no visitor data itself beyond feedback you chose to send (section 6), so most requests will concern the hosting logs and aggregated statistics described in sections 2 and 3.

8. no profiling, no automated decisions

Apart from the ad personalization described in section 9 — which only happens with your consent — no automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

9. advertising

The site shows ads served by Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When you first visit, a consent banner (Google's certified consent management platform) asks whether you agree to personalized advertising. If you consent, Google sets advertising cookies and processes data such as your IP address, device information, and interactions with ads to select and measure personalized ads; Google acts as an independent controller for this processing. If you decline, only non-personalized ads based on coarse context (such as the page content and approximate location) are shown.

Legal basis: your consent (Art. 6(1)(a) GDPR) for personalized advertising, which you can withdraw at any time via the consent banner (reachable through your browser's site settings or by clearing site data); legitimate interest in funding the site (Art. 6(1)(f) GDPR) for non-personalized ads. Google may transfer data to the United States under the EU-U.S. Data Privacy Framework. Details on how Google uses data: policies.google.com/technologies/partner-sites.

10. changes

This policy may be updated if the site's functionality changes. The current version is always available at this address.

See also the legal notice.

:feedback