mrhorda.com is a personal blog about Linux, containers, local AI and self-hosting. It sells nothing, runs no ads and no analytics, and does not build a profile of you. What follows is the whole of it: what is collected, who else sees it, and what you can ask me to do about it.
The short version
- No analytics, no ad networks, no tracking pixels, no newsletter.
- The only cookie this site sets by itself is the login session cookie.
- Two pages involve someone else: Live Stream embeds Twitch, and the contact form loads Google reCAPTCHA.
- Requests reach this server through Cloudflare, as they do for a large part of the web.
- Ask me to delete anything you have sent me and I will.
1. Who Runs This Site
mrhorda.com is run by Max, known online as MrHorda, from the Czech Republic. It is a personal site: nothing here is a commercial offer, and there are no paid placements or sponsored posts. The quickest way to reach me is the contact form.
2. What Is Actually Collected
Server logs. Like every web server, Apache records the IP address, browser user agent, requested URL and timestamp of each request. Those logs exist for security and troubleshooting, nothing else. No profiles are built from them and they are not joined with anything. If you need them gone, say so.
The contact form. If you use the contact form, whatever you type (name, email address, message) is sent to my mailbox so I can reply. It is not used for marketing, not added to a list and not passed on. Do not send credentials or anything you would not want sitting in an inbox.
Logins. Registration is closed, so there is no sign-up form and no way to leave an account behind. Accounts exist for administration only, and signing in sets a session cookie (see below).
Nothing else. To be specific, this site does not collect or process:
- analytics
- ad identifiers
- tracking pixels
- newsletters
- comments
- file uploads
- payments
3. Cookies
Two kinds of cookie can exist here, and only one of them is mine.
The session cookie. Joomla sets a single cookie with a random name. It is HttpOnly, it expires when you close the browser, and it does two jobs: keep a signed-in session alive and carry the security token that protects forms against cross-site request forgery. Without it, logging in simply does not work.
Twitch cookies. The Live Stream page embeds the Twitch player and Twitch chat. Those iframes come from twitch.tv, so Twitch sets its own cookies there and its own privacy policy applies. Every other page here loads nothing from third parties.
Google reCAPTCHA. The contact form is protected by reCAPTCHA v2, which loads from google.com when that page opens. It can set its own cookies and collect device and usage signals to decide whether you are a person; Google's privacy policy covers that. It runs on the contact page and nowhere else, and without it the form fills up with spam.
There is no cookie banner and no consent prompt, because there is nothing optional to consent to. No cookie set by this site is used for tracking, advertising or profiling.
4. Who Else Sees Your Request
Cloudflare. Public traffic to this domain is proxied through Cloudflare, which terminates TLS before the request reaches the tunnel back to my network. Cloudflare therefore sees request metadata: IP address, headers, paths. That leg of the journey is covered by Cloudflare's privacy policy.
Google. Only on the contact page, where reCAPTCHA v2 keeps the form from filling up with spam. The script is served by Google and Google's privacy policy applies to it.
Twitch. Only on the Live Stream page, and only if your browser loads the embeds. Blocking third-party frames or using a content blocker stops it.
Sites you click through to. YouTube, Twitch and every other outbound link are ordinary links, not embeds. They learn about your visit when you click, the same way any link on the web works.
5. Your Rights
You can ask what I hold about you, ask for a copy, have it corrected, have it deleted, object to how it is used, or complain to a supervisory authority. If you are in the EU, that authority in my case is the Czech Office for Personal Data Protection (uoou.cz).
The honest answer is usually short: an IP address in a rotated log line, and whatever email you chose to send me. I do not sell, rent or share personal data, and I do not use it to build profiles.
6. Using the Content
The articles, shorts and illustrations on this site are made here. Quote them, cite them, link to them, translate them, disagree with them in public; a link back is all I ask. Republishing whole articles elsewhere, or scraping the site to rebuild it under another name, is not fine.
7. No Warranty
Everything here is descriptive, not professional advice. Commands, configurations and benchmark numbers were run on my own hardware, and your hardware, firmware, kernel and luck will differ. If you follow a guide, you do it at your own risk; I am not liable for downtime, data loss or damaged components.
8. External Links
Outbound links are chosen because they were useful when the article was written. I do not control what is on the other end, and their terms and privacy policies apply once you are there.
9. Changes to This Page
If the site ever starts doing something new (analytics, comments, a newsletter), this page is updated before that ships and the date at the top changes. There is no legalistic version history: the current text is the one that applies.