Privacy
Short version: no advertising, no tracking cookies, no profiles and nothing sold. Visits are counted without storing your IP address. The details are below.
Last updated 21 October 2026.
Who is responsible
This site is run by Aroy Mak Mak, which is responsible for the personal data described here under the EU General Data Protection Regulation (GDPR). For anything about your data, email [email protected].
Visitor statistics
To see which pages are read, the site uses self-hosted, cookie-free analytics. When a page loads, it records the page address, the page you came from, your screen width and your country, which is worked out from your IP address at that moment. To count unique visitors without following anyone, it creates a one-way code from your IP address, browser details and a random value that changes every day. Your IP address and browser details are never stored, the daily random value is deleted after 48 hours, and after that the code cannot be linked back to you. Nothing is placed on your device and no data is shared with anyone else.
The legal basis is our legitimate interest in knowing which pages are useful, in a way that does not identify you. Visits from automated browsers are not counted.
Cookies
The site sets two cookies, and both are needed for it to work safely:
- XSRF-TOKEN: a security token that protects forms against cross-site request forgery.
- aroy-mak-mak-session: links your requests together between pages, so the security token above can be checked. It holds no personal information.
Both are deleted when they expire, after two hours without activity. They are not used for tracking or advertising, so no consent banner is needed. People who sign in to edit the site get a login cookie as well.
Hosting and delivery
The site runs on servers at Hetzner Online in Germany. It is delivered through Cloudflare, which protects it against attacks and speeds it up. Like any web server, these services handle your IP address to send you the page, and Cloudflare may keep security logs under its own privacy policy. Our server does not keep a log of visits. Errors are logged so they can be fixed, and those logs include the address of the page that failed.
Fonts and maps
Fonts are loaded from Bunny Fonts, a European font service that states it does not log visitors' IP addresses. On place pages, the map is drawn from OpenFreeMap map tiles, so your browser asks OpenFreeMap for the tiles around that place. No cookies are used for either.
Links to Google Maps, OpenStreetMap, TripAdvisor or a restaurant's own website only send anything to those services when you click them. From then on, their own privacy policies apply.
Contact form and email
If you use the contact form or email us, we keep your name, email address, message and any page address you add, so we can reply and make the correction or addition you suggest. Form messages are stored on our own server and are only seen by the people who run the site. They are not added to a mailing list or shared, and they are deleted when they are no longer needed for that conversation. The form does not record your IP address.
What we do not do
- No advertising and no advertising networks.
- No tracking pixels, social media widgets or third-party analytics.
- No selling, renting or sharing of personal data.
- No profiling or automated decisions about you.
Your rights
Under the GDPR you can ask to see the personal data we hold about you, have it corrected or deleted, restrict or object to how it is used, and receive a copy of it. Email [email protected] and we will reply within one month. Because the visitor statistics cannot identify you, there is usually nothing to look up there. You also have the right to complain to the data protection authority in your country.
Changes
If the way the site handles data changes, this page will be updated and the date at the top will change.