Privacy

Last updated: 2026-05-17. Significant changes will be reflected in the changelog at the foot of this page.

Who we are

stackharden.com ("we", “us”) is operated by:

• Controller: Data Vision IT Consulting Limited
• Registered address: Kilbride, Wicklow, Ireland
• Email for privacy matters: privacy@stackharden.com
• Supervisory authority: Data Protection Commission (Ireland) — dataprotection.ie

The tools at tools.stackharden.com are run by the same controller and have their own privacy notice covering the specific data handling there. This notice covers the content site (stackharden.com).

Our approach

This is a content site. We do not require accounts, do not run a comments system, do not host forms on stackharden.com, and do not embed third-party trackers in articles. The site is built as static HTML and served from a CDN.

Serving a website over the public internet still means request metadata flows through systems we use as processors. The rest of this notice is about what those are and what we do with the data they see.

What we process, and why

Server / CDN request metadata

Every request to stackharden.com is routed via our hosting / CDN provider (see Processors below). That provider sees:

• The requesting IP address.
• The URL requested.
• The User-Agent string sent by the browser.
• Standard HTTP headers.

We use this metadata only for operational security and abuse prevention (rate limiting, blocking known-bad traffic). We do not export these logs into our own systems for analysis. The CDN retains them according to its own retention policy, documented in its Data Processing Agreement.

• Legal basis: Article 6(1)(f) GDPR — legitimate interests (operating and protecting the site).
• Retention: As set by the CDN provider — we do not store these logs ourselves.

Analytics

We use Plausible Analytics — a cookieless, privacy-preserving web analytics provider hosted in the EU (Germany). Plausible processes the visitor’s IP address and User-Agent server-side to count unique visitors, derives a hashed fingerprint that rotates daily, and retains only aggregate metrics (pageviews per URL, referrer counts, browser / OS summaries). No cookies are set. No data is shared with third parties. No cross-site tracking.

Because Plausible sets no cookies and the only personal data processed is the IP / User-Agent fingerprint that rotates daily and is never available to us at row level, no consent prompt is required under GDPR or ePrivacy.

• Legal basis: Article 6(1)(f) GDPR — legitimate interests (understanding which content is read and how to improve it).
• Retention: As set by Plausible — aggregate metrics indefinitely; no individual session data retained.

Cookies

stackharden.com sets no cookies of its own. The CDN may set strictly-necessary security cookies in specific cases (e.g. after a CAPTCHA challenge). Full detail in the cookie notice.

Email correspondence

If you email us, we process your message and reply. We keep messages for the time needed to handle the matter and for a reasonable period afterwards for reference (typically up to 24 months for general queries, longer where the matter touches a legal or regulatory obligation).

• Legal basis: Article 6(1)(b) GDPR (taking steps in response to a request you initiated) or 6(1)(f) (legitimate interests), depending on the context.

Affiliate links

Some articles include affiliate links — typically to VPS providers, privacy-first analytics tools, or books. We disclose affiliate links and we never recommend a product solely because an affiliate programme exists.

When you click an affiliate link, your browser sends standard referrer information to the destination. That referrer may include a partner ID that lets the destination credit us if you sign up. We do not share any other information about you with affiliate partners — we do not know who you are.

Processors and international transfers

The following third parties process data on our behalf:

For processors based outside the EEA, transfers are made under the provider’s published Standard Contractual Clauses or an equivalent mechanism under GDPR Article 46.

Your rights under GDPR

In respect of personal data we process about you, you have the right to:

• Access — request a copy of the data we hold.
• Rectification — correct inaccurate data.
• Erasure — ask us to delete it (“right to be forgotten”).
• Restriction — limit how we use it.
• Portability — receive it in a structured, machine-readable form.
• Object — to processing based on legitimate interests.
• Withdraw consent — where processing relies on consent.

To exercise any of these, email privacy@stackharden.com. We aim to respond within one calendar month, extendable by a further two months for particularly complex requests (Article 12(3) GDPR).

You also have the right to lodge a complaint with a supervisory authority — for visitors based in Ireland, that is the Data Protection Commission (dataprotection.ie). If you are based elsewhere in the EEA, you may complain to your local supervisory authority.

Children

This site is aimed at sysadmins, DevOps engineers, and IT-adjacent professionals. Its content is not directed at children and we do not knowingly collect personal data from anyone under 16.

Security

We apply the hardening practices documented across the guides to our own infrastructure. The CDN and origin both enforce TLS 1.2 / 1.3 with modern cipher suites; access to operational systems uses key-based authentication with multi-factor authentication where supported.

No system is perfectly secure. If you become aware of a security issue that may affect visitor data, please email security@stackharden.com.

Changes to this notice

We will update this page when our processing practices change. The date at the top of the page reflects the most recent update.