courses.nik.zip
privacy
the short version: this host serves free course markdown. there is
no browser analytics sdk, no advertising, no accounts,
and no sale of data. optional funnel events fire only when a request
includes a session uuid — omit s or use
s=0 and we send nothing.
1. controller
ByteLane UG (haftungsbeschränkt), Kolonnenstraße 8, 10827 Berlin, Germany — nik@nik.zip (see the impressum).
2. hosting (cloudflare)
this site is served by Cloudflare, Inc. (USA) via Workers and Static Assets. cloudflare processes your ip address, request metadata and tls data to deliver content and defend against abuse, and may keep short-lived request logs (including workers logs). legal basis: legitimate interest in operating a secure free course host, art. 6(1)(f) GDPR. cloudflare is certified under the eu-us data privacy framework and processes data under standard contractual clauses where applicable.
3. analytics (posthog, server-side only)
i use posthog to measure whether free course chapters are fetched and completed. analytics runs only on the worker — there is no posthog browser sdk, no analytics cookies, and no localStorage used for analytics on this host.
opt-in via query param: pass
?s=<uuid> on chapter/manifest fetches to attach a
pseudonymous run id. the uuid is chosen by the client (or agent); it is
not an account and is not linked to a name or email here.
opt out: omit s or set
s=0 → content still works; no analytics events are
sent.
when a valid session is present, events may include:
-
event name:
course_chapter_fetchorcourse_chapter_miss - properties: course, resource, path, session_id, status, ua_class, env, course_version
ip intentionally not stored on analytics events
($ip: null, geoip disabled). no advertising identifiers, no
fingerprinting beyond a coarse user-agent class (e.g. curl / claude /
browser).
processor: PostHog (eu cloud — eu.i.posthog.com / frankfurt)
under a data processing setup; residual transfers covered by eu-us dpf /
sccs where applicable. legal basis: legitimate interest in measuring the
free course funnel, art. 6(1)(f) GDPR. retention: according to the posthog
project settings (pilot target: short retention).
session uuids are pseudonymous (they can single out a technical run), not fully anonymous. if you still have a session id, you can email the controller with it for erasure requests related to that run.
4. what we do not do
- no advertising, retargeting, or sale of personal data
- no user accounts or logins on this host
- no browser storage used for analytics
5. contact email
the site links nik@nik.zip. if you write, we process your address and message to reply (art. 6(1)(b)/(f) GDPR) and keep correspondence as long as the conversation is relevant.
6. your rights
under the GDPR you can request access, rectification, erasure, restriction, and portability, and you can object to processing based on legitimate interest (art. 21). you can also complain to a supervisory authority — for berlin: berliner beauftragte für datenschutz und informationsfreiheit (datenschutz-berlin.de). no automated decision-making with legal or similarly significant effects.
7. local course state
recommended agent flows may store progress (including a session id) in a file on your machine only — not on this server.
8. changes
if this host starts processing more than described here, this page changes first.