1. Controller
Mario V.W.B.R. Obst, resident in Erfurt, Thuringia, Germany. Address for service:
Mario V.W.B.R. Obst
c/o JL Consulting Group GmbH
Zürcherstrasse 84 #1623
8852 Altendorf
Switzerland
Contact: 42@html-code.fyi.
2. What this website does
The website loads its own HTML, CSS and JavaScript. It serves its bundled, openly licensed Inter font from this website and does not embed third-party media, advertising or analytics scripts. The files are delivered through Cloudflare Workers Static Assets. Hosting and security processing is described below.
3. Search
The search index is loaded as a local file. Matching happens in your browser. Search terms are not sent to the server by the site’s search code. Moving from the home page to search uses a URL fragment, which is not included in the HTTP request. It can remain in browser history, so avoid confidential information in searches.
4. Appearance and browser storage
The website uses a fixed dark appearance. Its own interface does not set cookies or save preferences, searches or exercise progress in localStorage, sessionStorage or IndexedDB. On a visit, it attempts to remove only the old html-fyi-theme preference saved by an earlier version. No service worker is installed. Interactive state is held in page memory. The guided first-page builder generates HTML and CSS from entries in page memory. Its preview does not load external resources, and its download button saves a standalone file only after a user action. Editable repair missions render HTML and CSS in a restricted preview after an update or check; learner JavaScript is not executed. Other interactive examples run only their supplied demonstration code.
Responses request no-store caching. This is not a promise to erase browser history, browser-managed session recovery, existing cached copies or files you deliberately download. Copying code writes to the clipboard only after you press the copy button; the site does not read your clipboard. It does not enumerate installed fonts or request access to your files, camera, microphone or location. Cloudflare’s security processing remains separate, as described below.
5. Cloudflare hosting
The domain html-code.fyi is registered through Cloudflare and managed there, as confirmed by the operator. The website is hosted on Cloudflare Workers Static Assets. The hosting provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Depending on the activated services, delivery and security can involve IP addresses, request paths, timestamps and browser or connection details. The purpose is reliable delivery and protection against abuse, based on the legitimate interest in operating this website under Article 6(1)(f) GDPR.
Cloudflare Web Analytics/RUM has not been enabled for this site. Cloudflare provides HTTPS delivery and network security, including a browser integrity check. The site itself does not set cookies. Cloudflare may process connection and security information, and its responses can instruct browsers to send network-error reports to Cloudflare. Processing may take place outside the EEA. Product-specific retention periods and the contractual arrangements applicable to this account have not been independently verified; no fixed deletion period is promised here. Consult Cloudflare’s Privacy Policy (new tab) and Data Processing Addendum (new tab).
6. Contact and postal correspondence
If you contact the operator, your contact details and message are used to answer the enquiry. The basis is Article 6(1)(f) GDPR for handling correspondence, or Article 6(1)(b) where a contractual enquiry applies. The operator’s policy is to delete correspondence once the enquiry has been resolved and further storage is no longer necessary. Relevant messages may be retained for as long as needed to establish, exercise or defend legal claims, or to meet any applicable legal retention obligations. There is no blanket permanent archive of all enquiries under this policy. Messages sent to 42@html-code.fyi are forwarded through Cloudflare to the operator’s email account managed with Apple iCloud+. Email handling involves the sender’s address, message contents, any attachments and technical delivery information. Cloudflare provides the forwarding service and Apple provides the destination email service. See Cloudflare’s Privacy Policy (new tab) and Apple’s Privacy Policy (new tab). The operator’s private destination address is not published. Provider-specific retention periods and processing arrangements for these services have not been independently verified.
The operator rents the published address under the Standard package for legal notices and address protection. The contractual partner is JL Consulting Group GmbH. Incoming letters are accepted at the published c/o address. For each letter, the operator chooses either a PDF scan or physical forwarding. After scanning, the original letter is destroyed. The operator can delete PDF scans in the service dashboard and applies the correspondence retention policy above to those scans. Processing can involve senders’ names, return addresses, letter contents and attachments. No specific automatic deletion period or immediate removal from the provider’s backups has been confirmed.
7. External websites
Links to documentation and personal projects do not load those websites until you follow the link. The destination then processes data under its own policy. This site sets a no-referrer policy for outgoing requests.
8. Your rights
Subject to the applicable requirements, GDPR provides rights to access, rectification, erasure, restriction, portability and objection. Where processing relies on consent, it may be withdrawn for the future. You may complain to a supervisory authority, including the Thuringian Commissioner for Data Protection and Freedom of Information (new tab). See the GDPR (new tab) for the statutory provisions.
9. Updates
Last updated 24 October 2026. This policy describes the website configuration and the operator’s correspondence policy. It will be updated when the services or processing arrangements change. Please contact the operator with privacy questions.