LEGAL

Privacy Policy

Only for this website, nodes-web.com. The Nodes MacOS app has its own policy.

Effective date: 2026-07-31
Operator: Nicolas Mallinckrodt
Contact: nicolas.mallinckrodt@tum.de

Summary

No accounts, no cookies, no analytics, no tracking code, nothing written to your browser.
One exception, named in full in section 8: the link that sends you to the App Store carries a campaign token, so Apple can count how many people arrived from here.
This site is a set of static files, fonts included. We keep no visitor data of our own - what follows is who else sees a request when you open a page, because the site is hosted by GitHub and some pages load images from where they are published.

Details

1) What we collect ourselves

Nothing. There is no account, login, contact form, or comment field on any page, and no analytics, advertising, or tracking code runs here.
We run no server of our own and hold no visitor database. The one figure that ever reaches us is Apple's aggregate count of visits that arrived at the App Store from this site - see section 8 - and it names nobody.

2) Cookies and browser storage

This site sets no cookies and writes nothing to local storage, session storage, or IndexedDB. There is no cookie banner because there is nothing to consent to.

3) Hosting and server logs

The site is hosted on GitHub Pages by GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. Delivering a page means GitHub receives your IP address, the file requested, the time of the request, and your browser's user agent and referrer, and may keep them in server logs to serve the site and keep it secure. We have no access to those logs.
Legal basis: Art. 6(1)(f) GDPR - our legitimate interest in running a working, secure website.
GitHub's privacy statement: docs.github.com/site-policy

4) Fonts

The lettering is served from this site. All six faces are open-licensed fonts we host ourselves under /fonts/, so no request goes to Google Fonts and none of them sets a cookie.
Loading them from Google would have handed your IP address to Google before the first letter appeared, which is why they are here instead.

5) Content loaded from other services

Some pages pull images and public metadata straight from where they live. Each of those requests tells that provider your IP address, your user agent, and the page you came from:

About - profile pictures from github.com (GitHub, Inc.)
Gallery - video thumbnails from i.ytimg.com (Google) and article covers from substackcdn.com (Substack, Inc.), which fetches the original from Substack's own storage server-side, so your browser only ever talks to the CDN
Open Source - repository details from api.github.com and raw.githubusercontent.com (GitHub, Inc.)

No video player, tracking pixel, or social widget is embedded anywhere on the site. The gallery cards are still images that link out.

6) Processing outside the EU

The providers named above are US companies, so those requests may be processed in the United States. Where a provider is certified under the EU-US Data Privacy Framework, the transfer rests on that adequacy decision; otherwise it rests on the EU Standard Contractual Clauses.

7) Links to other sites

Pages link out to the Mac App Store, Instagram, YouTube, Substack, and GitHub. Following a link hands you to that service, and its privacy policy takes over from there.
We are not responsible for the content of external sites; if we learn that one we link to breaks the law, we remove the link.

8) Buying Nodes

Nothing is sold here. This site has no cart, no checkout, and no payment field, and it takes no payment data of any kind. Where a page shows a price, it is quoting the App Store, and the DOWNLOAD link on Get the App hands you to Apple, who is the seller.
Prices shown are US App Store prices; your own storefront may differ, and the price Apple shows you at the moment of purchase is the one that counts. Alexandria and Rosetta are one-time purchases - no subscription, nothing that renews.
That DOWNLOAD link carries an App Store campaign token in its address, which tells Apple the visit came from this site. Apple reports it back to us only as a count in App Store Connect - how many people arrived from here - never who they are. We get no name, no email, and no payment detail.
Because Apple is the seller, everything after that link - payment, receipts, refunds, and any right of withdrawal - runs under Apple's terms, on your Apple Account. We are not party to that transaction and never see its details. What the app itself does with a purchase is set out in the MacOS app's policy.

9) If you write to us

We use your address and your message only to answer you (Art. 6(1)(b) and (f) GDPR), and keep them no longer than the exchange needs. Ordinary email is not end-to-end encrypted on its way to us.

10) Your rights

Under Art. 15-21 GDPR you can ask for access to, correction of, erasure of, restriction of, or a copy of your personal data, and object to processing based on legitimate interests. Write to the address above.
Because we hold no visitor data ourselves, a request about this website usually leaves us nothing to hand over - what exists sits in our providers' logs.
You can also complain to a supervisory authority. For us that is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) in Ansbach, Germany.

11) Changes to this policy

If the site starts loading something new - analytics, an embedded player, a form - this page is updated before that ships, and the effective date at the top changes with it.

12) Copyright

Text, images, screenshots, and the Nodes marks on this site are ours unless credited otherwise. Code we publish is licensed in its own repository - see Open Source. Third-party names and logos belong to their owners.

13) Contact

Questions about this website or this policy? Email nicolas.mallinckrodt@tum.de.