Privacy Policy

How poor-plebs.com collects, uses, and protects your personal data under the GDPR.

Last updated: 2026-03-27

1. Controller and contact

The data controller for the personal data described in this Privacy Policy is: Poor-Plebs e.U., Austria. Email: contact@poor-plebs.com. Full operator details are available on our Imprint page.

We are a small business and are not required to appoint a Data Protection Officer under Article 37 of the GDPR. For all data protection inquiries, please contact us at the email address above.

2. Scope

This Privacy Policy explains how we collect, use, and protect personal data in connection with the poor-plebs.com website and blog.

3. Personal data we collect

Technical data: When you visit this website, the hosting provider (GitHub) may collect your IP address, browser type and version, operating system, access timestamps, and referring page. This is standard web server logging performed by GitHub as an independent data controller. See GitHub’s Privacy Statement for details.

Comment data: If you leave a comment on a blog post via Giscus, you authenticate with your GitHub account. Giscus loads resources from giscus.app and api.github.com and stores comments as GitHub Discussions on our repository. See the Giscus Privacy Policy for details.

Data we do NOT collect: We do not collect email addresses, names, or any personal information directly through this website. We do not use contact forms, newsletter sign-ups, or account registration.

4. Purposes and legal bases

We process personal data for the following purposes and on the following legal bases under Article 6(1) of the GDPR:

Legitimate interests (Article 6(1)(f)): Enabling user interaction through the Giscus comment system. Our legitimate interest is facilitating community discussion on blog posts. This interest is balanced against your rights, as commenting is entirely optional and requires your active decision to authenticate with GitHub.

5. Data sharing and recipients

GitHub, Inc. (USA): Website hosting via GitHub Pages. GitHub receives technical data (IP address, browser information) as part of serving web pages. GitHub acts as an independent data controller. Transfer safeguard: EU-US Data Privacy Framework / Standard Contractual Clauses (Article 46(2)(c) GDPR).

Giscus: Comment system powered by GitHub Discussions. When you leave a comment, your GitHub username and comment content are stored as a GitHub Discussion. Giscus acts as an intermediary to the GitHub API.

We do not sell, rent, or trade your personal data. We do not share data with advertisers or data brokers.

6. International data transfers

Website hosting data is processed by GitHub, Inc. in the USA. Where data is transferred outside the EEA, appropriate safeguards are in place, including Standard Contractual Clauses adopted by the European Commission (Article 46(2)(c) GDPR) or reliance on adequacy decisions (Article 45 GDPR).

7. Cookies and similar technologies

This website does not set any first-party cookies. We do not use analytics, tracking, or advertising cookies.

Third-party services (GitHub, Giscus) may set their own cookies when you interact with them. These are governed by their respective privacy policies.

This site supports Progressive Web App (PWA) features, including offline caching via a service worker. Cached data is stored locally on your device and is not transmitted to us.

8. No analytics

We do not use any analytics or tracking tools on this website.

9. Your rights under the GDPR

As a data subject, you have the following rights under the GDPR. To exercise any of these rights, contact us at contact@poor-plebs.com:

• Right of access (Article 15): You may request a copy of the personal data we hold about you.
• Right to rectification (Article 16): You may request correction of inaccurate personal data.
• Right to erasure (Article 17): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected.
• Right to restriction (Article 18): You may request that we restrict the processing of your personal data in certain circumstances.
• Right to data portability (Article 20): You may request your personal data in a structured, commonly used, and machine-readable format.
• Right to object (Article 21): You may object to processing based on legitimate interests.

We will respond to your request within one month. This period may be extended by two further months where requests are complex or numerous, in which case we will inform you of the extension within the first month.

10. Children

This website is not directed at persons under the age of 16. We do not knowingly collect personal data from children under 16.

11. Changes to this policy

We may update this Privacy Policy from time to time. The updated policy will be posted on this page with a new “Last updated” date.

12. Supervisory authority and complaints

You have the right to lodge a complaint with a data protection supervisory authority if you believe our processing of your personal data infringes the GDPR. The competent authority in Austria is:

Österreichische Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40-42, 1030 Wien, Austria. Email: dsb@dsb.gv.at. Website: www.dsb.gv.at.

13. Contact

For any questions about this Privacy Policy or to exercise your data protection rights, please contact us at: Poor-Plebs e.U., Austria. Email: contact@poor-plebs.com. Full operator details are available on our Imprint page.