Privacy
This is a small site belonging to one person. It describes what happens to information here, named service by named service.
Controller: Miguel Barroso, trading as Ebihara Solutions (Sweden) · [email protected] · Reviewed and updated October 2026
3 kinds of record
What this site collects
- Just visiting
The web server records the ordinary things a web server records: your IP address, the page you asked for, the time, your browser’s user-agent string, and the page that referred you. Cloudflare, which sits in front of the site, records the same for its security filtering.
- The contact form
Your name, your email address and whatever you write in the message. The form also sends the technical fields its software needs to deliver the message and to check it was not sent by a bot: the form’s identifier, version and language, a tag for the form on the page, a hash of what was posted, and the token from the Cloudflare Turnstile check. None of them identifies you beyond what you typed.
- Security events
The site runs a security plugin that keeps a log of blocked requests and failed login attempts, which includes the IP address they came from. This applies to attacks, not to reading the site.
The site has no user accounts, no newsletter, no advertising and no profiling. Registration is switched off. There is nothing here to sign up for.
Reply, defend, count
What I use it for
To reply to you, to keep the site up and defended, and to see roughly how many people read which page. That is the whole list.
I never sell, rent or trade your personal data, and I do not use it to advertise to you anywhere else.
A message you send through the contact form arrives as an email in my mailbox and stays there like any other correspondence, for as long as the conversation is useful. It is not written into a database on this site, and there is no customer relationship system behind it.
One exception
Cookies and analytics
- Reading a page
Sets nothing. On an ordinary anonymous visit to any page here, the site returns no
Set-Cookieheader at all; I check this after every change to the site. - Cloudflare security cookies
The exception. If Cloudflare challenges a request, through its bot protection or the Turnstile box on the contact form, it sets a cookie such as
cf_clearanceto record that the challenge was passed. Security, not measurement, and only on a challenged request.
There are no advertising or analytics cookies and no analytics script. The only third-party script on the site is Cloudflare’s Turnstile widget on the contact form, loaded for the bot check. Visitor numbers come from Cloudflare’s own request logs, counted by the network the traffic already passes through: no cookie, no script running in your browser, and no identifier that follows you anywhere else. It is a blunter measurement than the alternative, and it is enough.
There is no cookie banner, because there is nothing to ask you for. A cookie that exists only to record that you passed a security check is strictly necessary, and consent is not required for it. Until September 2026 this site ran Google Analytics 4, which set two cookies before you had any chance to refuse them. It has been removed, and those cookies with it.
4 companies
Who else touches it
These are the companies involved in running this site. Each one sees only what its job requires.
- netcup
Germany. The server the site runs on, and therefore the web server logs.
- Cloudflare
United States. DNS, the network in front of the site, the bot protection, and the Turnstile challenge on the contact form. It sees every request, including your IP address.
- Resend
United States. Relays the contact form’s message from the site to my mailbox, so it sees what you wrote.
- Migadu
Switzerland. Hosts the mailbox that message lands in.
Several of these are outside the EU and EEA, which means data reaches countries whose privacy law differs from Swedish law. They are used under their own standard data-processing terms.
Under the GDPR
Your choices, and your rights
You can block cookies in your browser, use a tracker blocker, or simply read the site without writing to me. None of that limits what you can see here.
Because I am established in Sweden, the GDPR applies. You can ask me for a copy of what I hold about you, ask me to correct it, ask me to delete it, or object to my holding it at all. Write to [email protected] and I will do it; there is not enough data here for that to be difficult.
If you think I have handled your information badly, you are entitled to complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY). I would appreciate the chance to fix it first, but that is your call.
Changes
Changes, and how to reach me
If the way this site works changes, a service added or removed, a cookie gone, I will change this page and update the date at the top. The page is also reviewed when the site is, whether or not anything changed.
Questions about any of it: [email protected].
