Privacy policy
Last updated 15 September 2026
Who is responsible?
Tom Geldschläger
Scheiblerstrasse 4
12437 Berlin
Germany
E-mail: thefountainhead@gmx.net
Phone: +49 (0) 3066300766
What data do we collect?
If you accept cookies:
- Google Analytics collects a random ID, your approximate location from your IP address, your device and browser, the pages you view, the links you click, and which videos and tracks you play.
- If you load the music player, Spotify collects data under its own privacy policy. We have no access to this data.
- If you load the video player, YouTube (part of Google) collects data under Google’s privacy policy. We have no access to this data.
If you decline cookies, you can still load the music player and the videos. Spotify and YouTube collect their data; Google Analytics does not collect anything.
Whatever you choose, GitHub, where the website is hosted, logs visitors’ IP addresses for security. We have no access to this data.
How do we collect the data?
For Google Analytics and Spotify: through cookies they set in your browser. Neither is loaded unless you allow it.
For YouTube: the videos are embedded in privacy-enhanced mode, on youtube-nocookie.com, which does not set cookies until you actually play something. Loading a video tells Google your IP address, so no video is loaded unless you ask for it.
For GitHub: no cookies are set; its logging happens on its server as each page is requested.
How is the data used?
We use Google Analytics to measure website usage - which pages are viewed, which links are clicked, which videos and tracks are played, and which cities visitors come from - to see where there is interest. The data does not tell us who you are and is neither used for advertising nor sold.
How Spotify and YouTube uses the data it collects is set by Spotify’s and Google’s privacy policies respectively, not by us.
GitHub uses the IP addresses it logs for the security of its service and to meet its legal obligations.
What is the legal basis?
For Google Analytics, Spotify and YouTube: your consent, under Article 6(1)(a) GDPR and § 25(1) TDDDG. Everything on the website works without consent, apart from the music player and the videos.
For GitHub: the server logs are its own processing, on the basis set out in its privacy statement.
Who receives it, and where?
- Google Ireland Limited and Google LLC: the analytics data, and the video data through YouTube
- Spotify AB: the music player data
- GitHub, Inc. (a Microsoft company): the server logs
Google LLC and GitHub, Inc. are in the United States, certified under the EU–US Data Privacy Framework, for which the European Commission has adopted an adequacy decision. Certifications are listed at dataprivacyframework.gov.
Spotify sets out its own transfers in its privacy policy.
How long is it kept?
Google deletes the data about individual visits after 14 months. YouTube, Spotify and GitHub keep theirs under their own schedules. Cookie lifetimes are listed under “What is stored on your device?”.
We keep no copy of any of it.
What is stored on your device?
- Your consent answers - set by this website - kept until you clear them. One for the cookie banner, set whether you accept or decline so that it remembers your answer, and one each for the music player and the videos, set if you allow either from its own placeholder.
- Two Google Analytics cookies - a random ID and session state - 2 years.
- Spotify cookies - set when you load the music player; lifetime as per Spotify policy.
- YouTube cookies - set when you play a video; lifetime as per Google policy.
How to withdraw consent
Use “Cookie settings” at the bottom of any page on the website. The cookie banner returns and you can change your answer. It also clears any permission you gave the music player or the videos on their own, so each asks again before it loads.
Declining stops tracking immediately. Cookies already set stay in your browser until you clear them.
What are your data protection rights?
You have the right to:
- access your data
- have it corrected or erased
- restrict or object to its processing
- receive it in a portable form
- withdraw consent at any time, without giving a reason
Withdrawing does not affect anything done before you withdrew.
To exercise any of these, e-mail thefountainhead@gmx.net.
Analytics data are on our end, though the data holds only a random ID and cannot be traced back to you. Spotify’s, YouTube’s and GitHub’s data is theirs — we will point you there.
Other companies’ policies
This policy covers only this website.
Google (YouTube included), Spotify and GitHub handle data under their own terms:
How Google uses information from sites or apps that use our services · Google Privacy Policy · Spotify Privacy Policy · GitHub Privacy Statement
Ticket sellers, merch shops and social networks we link to have their own policies.
How to contact us
If you have any questions about our privacy policy, the data we collect, or you would like to exercise one of your data protection rights, you can contact us by any of the following:
E-mail: thefountainhead@gmx.net
Phone: +49 (0) 3066300766
Post: Scheiblerstrasse 4, 12437 Berlin, Germany
How to contact the authority
Should you wish to report a complaint, or if you feel that we have not addressed your concern in a satisfactory manner, you may contact the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
Alt-Moabit 59–61
10555 Berlin
Germany
E-mail: mailbox@datenschutz-berlin.de
Phone: +49 30 13889-0
Fax: +49 30 2155050