Privacy
The short version: this site sets no cookies, runs no script that watches you, and makes no request to any server but its own. Your visit is counted, in aggregate, from the server log that serving a page produces anyway. What follows is the long version, because the short one is not a legal basis.
Controller
Hosting and server logs
This site is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Serving a page necessarily means Netlify's servers process your IP address, the time of the request, the resource requested, the response status and your browser's user agent. That happens for every website you visit and cannot be switched off without switching off the site.
Legal basis: Art. 6 (1) (f) GDPR, the legitimate interest in providing the site reliably and securely. Netlify is certified under the EU–U.S. Data Privacy Framework, and its data processing agreement makes the Framework the basis for transfers to the United States. The European Commission's standard contractual clauses apply instead if the Framework is declared invalid or Netlify does not recertify.
Those logs are also the source of the traffic figures described below. They are not read individually and nothing is looked up in them.
Traffic figures
Netlify Web Analytics is switched on for this site. It is worth being precise about what that does and does not mean, because most analytics means something worse.
It runs entirely on Netlify's servers and reads the request logs described above. No script is sent to your browser, no cookie is set, no identifier is stored on your device and nothing is loaded from a third party. It cannot be blocked by an ad blocker for the same reason it cannot follow you anywhere: it never reaches you at all.
What it reports is page views, the most-read pages, referring sites, the locations they were served to, bandwidth, and missing resources. Unique visitors are counted by distinct IP address per day. An IP address is personal data, so that counting has a legal basis: Art. 6 (1) (f) GDPR, the legitimate interest in knowing whether anybody reads this. The figures are only ever seen in aggregate. Netlify's charts cover the last thirty days.
The site's Content-Security-Policy is default-src 'none'
with scripts limited to 'self', so a browser-side tracker
could not run here even if one were added by mistake. The browser
would refuse it.
Cookies and local storage
This site sets no cookies of any kind, stores nothing in local or session storage, and uses no tracking pixels, no advertising and no fingerprinting. There is no consent banner because there is nothing to consent to.
Fonts
The two typefaces, EB Garamond and JetBrains Mono, are served from this domain. No request is made to Google Fonts or to any other font service, which is the entire reason they are self-hosted.
Embedded content
None. No video players, no social embeds, no comment system, no newsletter form, no share buttons. Every request the site makes goes to stupidwat.ch and nowhere else.
Contact by email
If you write to hello@tedium.ventures, your address and whatever you put in the message are processed in order to answer you, on the basis of Art. 6 (1) (f) GDPR. Letters are published only with the correspondent's recorded consent — that is enforced by the site's build, which refuses to compile a letter without it, and not merely by policy. Correspondence is kept as long as the exchange is live and deleted when it is not.
External links
Links to auction houses, dealers and other publications leave this site. Once you follow one, that operator's privacy policy applies and ours stops.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. In practice there is very little here to exercise them against. Write to hello@tedium.ventures.
You may also complain to a supervisory authority. The one responsible for this site is
Automated decisions
No automated decision-making and no profiling take place. The publication is assembled by a pipeline rather than a staff, which is the joke the masthead is making, but that pipeline reads auction catalogues — never visitors.