Skip to main content
NK logo

Privacy Policy

Last updated: 4/14/2026

1. Controller

The controller responsible for data processing on this website is:
Nima Salami Kazerouni, Varziner Str. 11, 12161 Berlin, Germany
Email: xnimax@gmail.com
Phone: +49 163 814 7083

2. Hosting by Vercel and server log files

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit the website, Vercel processes technically required connection data, including IP address, date and time of access, requested URL, referrer, browser and device information.

Processing is based on Art. 6(1)(f) GDPR for the purpose of secure and stable website operation. Where Vercel processes data outside the EU, this is done on the basis of appropriate safeguards under Art. 44 ff. GDPR. Further information: https://vercel.com/legal/privacy-policy.

3. Database hosting by Turso

We use Turso (ChiselStrike, Inc.) as our database provider to store contact submissions, newsletter subscriptions, blog posts, projects and other content. Personal data is processed only as necessary for handling your request or operating the website (Art. 6(1)(b) and (f) GDPR). Further information: https://turso.tech/privacy.

4. UTM tracking and visit statistics

To understand the effectiveness of links and campaigns, we store anonymised UTM parameters (utm_source, utm_medium, utm_campaign) and the visited page in our database. No personal data such as IP addresses is permanently stored in this context. Processing is based on Art. 6(1)(f) GDPR.

5. Contact form

When you use the contact form, we process your name, email address, message content, your consent to data processing and an anonymised hash of your IP address for abuse prevention.

Processing is based on Art. 6(1)(b) GDPR for handling your inquiry and potential collaboration. The IP hash for rate-limiting is processed under Art. 6(1)(f) GDPR. Submissions are stored in our database and forwarded by email to the controller.

6. Email delivery via Gmail SMTP

Contact submissions are forwarded by email via Gmail (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to the controller. The transmitted data is limited to name, email address and message content. Legal basis: Art. 6(1)(b) and (f) GDPR. Further information: https://policies.google.com/privacy.

7. Newsletter

When you subscribe to the newsletter, we store your email address and optionally your name in our database. Subscription is based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time.

8. Media storage via Vercel Blob

Uploaded images and media files are stored via Vercel Blob (Vercel Inc.) and served via CDN. Processing is based on Art. 6(1)(f) GDPR for website operation.

9. Spam protection via Cloudflare Turnstile

To protect the contact form from automated abuse, we use Cloudflare Turnstile by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Technical data such as IP address, browser information and interaction data may be processed. Legal basis: Art. 6(1)(f) GDPR. Further information: https://www.cloudflare.com/privacypolicy/.

10. Consent management and local storage

Your consent decision regarding optional analytics services is stored locally in your browser's Local Storage (key: consent). Technically necessary storage is based on Art. 6(1)(f) GDPR. Optional analytics services are only activated when you grant your consent under Art. 6(1)(a) GDPR. You can change or withdraw your consent at any time via the cookie settings on this website.

11. Google Tag Manager

Where you have consented, we use Google Tag Manager by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to load and manage analytics tags. Activation is based exclusively on your consent (Art. 6(1)(a) GDPR). Further information: https://policies.google.com/privacy.

12. Google Analytics 4

Where you have consented and no Google Tag Manager is configured, Google Analytics 4 (Google Ireland Limited) may be used. Page views, user behaviour, device data and anonymised IP addresses may be processed. Activation is based exclusively on your consent (Art. 6(1)(a) GDPR). Transfer to third countries, including the USA, may occur; this is done on the basis of appropriate safeguards under Art. 44 ff. GDPR.

13. Microsoft Clarity

Where you have consented, we use Microsoft Clarity by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, for analysing user behaviour (heatmaps, session analysis). Activation is based exclusively on your consent (Art. 6(1)(a) GDPR). Transfer to the USA may occur on the basis of appropriate safeguards under Art. 44 ff. GDPR. Further information: Microsoft Privacy Statement.

14. Error monitoring with Sentry

For technical monitoring and error analysis we use Sentry by Functional Software, Inc. dba Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA. Browser and OS data, error timestamps and technical diagnostic information may be processed. Usage is limited to error monitoring only; session replay is not activated. Legal basis: Art. 6(1)(f) GDPR. Further information: https://sentry.io/privacy/.

15. Retention periods

Personal data is stored only for as long as necessary for the respective purposes or required by law.

  • Contact submissions: Until the inquiry has been fully handled.
  • Newsletter: Until unsubscription or withdrawal of consent.
  • Consent data (Local Storage): Until changed or deleted by the user.
  • Sentry diagnostic data: According to Sentry's retention policy (default: 90 days).

16. Recipients and third-country transfers

Recipients of personal data include in particular: Vercel (hosting), Turso (database), Gmail SMTP (email delivery), Cloudflare (spam protection), Google (Analytics/GTM upon consent), Microsoft (Clarity upon consent) and Sentry (error monitoring). Where service providers are located in third countries, processing is only carried out on the basis of appropriate safeguards under Art. 44 ff. GDPR.

17. Your rights

  • Access to your stored data
  • Rectification of inaccurate data
  • Erasure or restriction of processing
  • Objection to processing
  • Data portability
  • Withdrawal of consent with future effect
  • Complaint to a data protection supervisory authority

18. Changes to this privacy policy

This privacy policy will be updated whenever technical processes or legal requirements change. The version currently published on this website is authoritative.

Last updated: April 14, 2026