Last updated: October 14, 2026.
Lemondrilla is a personal writer’s blog. It sells nothing, shows no ads and does not trade in your data. This page explains, in plain language, what little data the site handles, why, and what you can do about it.
Who is responsible
The data controller is Adam Porkoláb, the author of this site (Hungary, EU). You can reach me through the contact page.
Just reading
- Cloudflare sits in front of the site as a content delivery and security network. It processes your IP address and request data to deliver pages and to block attacks (legitimate interest, Art. 6(1)(f) GDPR). Cloudflare is certified under the EU–US Data Privacy Framework.
- Server logs on the site’s own server record IP addresses, pages requested and browser type for security and troubleshooting. They are kept only briefly and are not used for profiling (legitimate interest).
- Fonts and images are served from this site itself, so reading a page does not send your IP address to Google Fonts or image services. (Should an older post ever fall back to an Unsplash photo, that image is loaded from Unsplash’s servers.)
- Jetpack Stats (Automattic) counts page views in aggregate, without advertising cookies (legitimate interest).
Analytics: only if you say yes
Google Analytics 4 is loaded only after you click “Count me in” in the cookie notice (consent, Art. 6(1)(a) GDPR). Until then the Google script is not even downloaded. If you agree, Google sets cookies (_ga, _ga_*) to count visits and see which pages are read; advertising storage and ad personalisation are always switched off on this site. You can change your mind at any time with the “Cookie settings” link in the footer; declining removes the Analytics cookies. Google is certified under the EU–US Data Privacy Framework.
Things you choose to do
- Comments. When you comment, the name, email address, website, comment text, IP address and browser string you send are stored with the comment. The comment text, name and website are public; the email and IP are not. Comments are checked for spam by Akismet (Automattic). Your avatar may be loaded from Gravatar based on a hash of your email address. Comments stay until you ask for removal.
- Newsletter. If you subscribe, your email address is stored by MailPoet on this site, and you must confirm the subscription (double opt-in). Newsletters are sent through the email provider Migadu (EU). Every email has an unsubscribe link; after unsubscribing you are no longer mailed.
- Contact form. What you write in the contact form (name, email, message) is emailed to me and kept only as long as the conversation needs it.
- Webmentions. If you link to a post from your own site and send a webmention, the public URL and excerpt of your post may appear under the post.
- Listen (read aloud). The “Listen” button sends the text of the article to this site’s own speech service, which turns it into audio using Microsoft’s neural voices. Your IP address is not passed on to Microsoft; only the article text leaves the server.
- Share buttons. The Mastodon and Bluesky buttons are plain links: nothing is sent to those services unless you click them.
- Following on the Fediverse. The blog can be followed from Mastodon and other ActivityPub servers as @lemondrilla. If you follow, like, boost or reply, your server sends this site your public profile (handle, name, avatar) and the content of your reply; replies may appear as comments under the post. You can undo a follow or delete a reply from your own server at any time.
- Podcast. Every essay is also published as an audio episode (generated from the text with the same speech service as the Listen button). Podcast apps that you subscribe with download the audio files from this site.
Stored in your browser
A few preferences are kept in your browser’s local storage, never sent to anyone: whether Rage Mode (dark mode) is on, your cookie choice, how far you read a long essay (so you can pick up where you left off; forgotten after 60 days), and, if you share to Mastodon, which server you are on. Commenting may set WordPress’s own comment cookies to remember your name and email.
Your rights
You can ask for access to, correction or deletion of your data, restriction of processing, data portability, and you can object to processing based on legitimate interest or withdraw consent at any time. Write to me via the contact page. You also have the right to lodge a complaint with the Hungarian data protection authority, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH, naih.hu).