How your privacy is protected

Last Updated: January 8, 2026

TL;DR

I collect as little information as possible. When you visit dm100.net, your IP address is retained for three days solely to protect against network-level attacks. After that window, I convert your IP address to a general geographic location and permanently delete the original IP. I use bunny.net for content delivery and DNS, which means your requests pass through their infrastructure—they are a privacy-focused, EU-based provider that does not track users. I do not use third-party analytics, advertising, or tracking beacons. I do not sell or share your data with anyone.

General Principles

I believe your personal data belongs to you. The purpose of this policy is to explain, in plain terms, what information I collect when you interact with dm100.net, why I collect it, how long I keep it, and what I do with it.

I operate dm100.net as a personal blog and hobby project. It is not a commercial enterprise, and I do not enter into business relationships with visitors. Any services I may offer—such as APIs or public tools—are provided without warranty, without charge, and without creating any contractual obligation on my part.

I aim to comply with the European Union’s General Data Protection Regulation (GDPR) as a baseline standard, regardless of where you are located. 1 If stronger privacy protections emerge elsewhere, I intend to adopt those as well.

Infrastructure and Third-Party Services

Content Delivery and DNS via bunny.net

dm100.net is served through bunny.net, a privacy-focused content delivery network headquartered in the European Union. bunny.net handles both the delivery of website content and the resolution of DNS queries for dm100.net. 23

When you visit dm100.net or your device resolves its domain name, your request passes through bunny.net’s global infrastructure. According to bunny.net’s published policies, they do not typically collect, store, or distribute information that could identify individual users. 45 They do not share personal data with third parties except where necessary for service operation. 6

I have selected bunny.net specifically because of their EU-first, privacy-conscious approach. 4 However, because your requests do traverse their network, I encourage you to review bunny.net’s privacy policy for complete details on their data handling practices.

What This Means for You

Data I Collect Directly

Web Server Logs

Like virtually all web servers, mine maintains transaction logs. These logs include:

Retention and Anonymization:

I retain complete log data, including IP addresses, for three days. This short retention window exists exclusively to detect and respond to network-level attacks such as distributed denial-of-service (DDoS) attempts or other malicious traffic patterns.

After three days, I process the logs as follows:

  1. I convert the IP address to a general geographic location (typically country or region level).
  2. I permanently delete the original IP address.
  3. The remaining anonymized data may be retained indefinitely for aggregate statistical purposes.

If an IP address is associated with an ongoing attack or security incident, I may retain it beyond three days as necessary to protect the site’s integrity.

Inferred and Aggregate Data

I may infer aggregate, non-identifying information from server activity. For example:

This information is statistical in nature and cannot be used to identify any individual.

APIs and Public Tools

If I offer any public APIs or tools on dm100.net, I may log request metadata (timestamps, endpoints accessed, request volume) to monitor for abuse and ensure fair use. These hobby services are provided as-is, without support, service-level agreements, or any guarantee of availability. Use of these tools does not create a business relationship or impose any liability on my part.

Data I Do Not Collect

I do not:

Cookies

I use cookies only where technically necessary for the site to function correctly. These cookies:

Opting Out

Because I collect only minimal technical data required for security, I do not offer a formal opt-out mechanism. That said, I have no objection to your use of VPNs, Tor, or other privacy tools to obscure your IP address. Such tools are fully compatible with dm100.net.

For general guidance on protecting your privacy online, I recommend the Electronic Frontier Foundation’s Surveillance Self-Defense guide.

Security

I take reasonable technical measures to protect the limited data I do collect:

Your Rights

Consistent with GDPR principles, you have the right to:

Given my minimal data collection and rapid anonymization, it is unlikely I will hold identifiable information about you for more than three days. However, if you believe I possess data about you and wish to exercise these rights, please contact me.

Children’s Privacy

dm100.net is not directed at children, and I do not knowingly collect personal information from minors.

Changes to This Policy

I may update this policy from time to time. Material changes will be noted at the top of this page with a revised “Last Updated” date. Continued use of dm100.net after changes are posted constitutes acceptance of the updated policy.

Contact

For questions, concerns, or requests related to this privacy policy, please contact:

Email: privacy@dm100.net

References:

  1. General Data Protection Regulation - Wikipedia ↩︎

  2. Bunny DNS | DNS  ↩︎

  3. Bunny DNS | DNS ↩︎ ↩︎

  4. GDPR Compliance with Privacy-First Tools by ↩︎ ↩︎

  5. Bunny.net | General Data Protection Regulation (GDPR) ↩︎

  6. Privacy & Data Policy | bunny.net ↩︎