This page says what happens to your data when you read this website. There is not much to tell. The site sets no cookies and loads nothing from another company.
01
Nothing is stored on your device and nothing is read from it, so there is no consent banner. You do not have to give me anything to read this site, and nothing here is required by law or by a contract.
02
This site is a set of files served by GitHub Pages. Like every web server, GitHub sees the request your browser makes: your IP address, the page you asked for, the time, and what your browser says it is. GitHub uses that to keep the service running and secure. Those logs stay with GitHub. I don't get access to them.
The legal ground is legitimate interest, in the sense of article 6(1)(f): a website that nobody can keep online or defend against abuse is of no use to you either. GitHub sets out what it does with the data in what GitHub Pages collects and in the GitHub privacy statement, including how long it keeps them.
GitHub is an American company, so this data leaves the European Union. For those transfers GitHub relies on the European Commission's standard contractual clauses and on its certification under the EU-U.S. Data Privacy Framework. Both are described in the statement linked above.
The font is served from this site rather than from a font service, so loading a page involves no other company.
03
Support runs on email. A question or a bug report arrives in my mailbox with your address and whatever you put in the message. I use it to answer you and I keep the thread, so I can look up what was said if the same problem comes back later. That is a legitimate interest as well, under the same article: you asked me something and I want to be able to answer it properly.
Your address is not added to a mailing list and is not passed on to anyone. The mailbox itself is hosted by one.com, a Danish company, so a message sits on their servers as well as in my mail client, and it stays within the European Union.
I have no fixed schedule for clearing out my mailbox; a thread goes when it is no longer any use to either of us. If you ask me to delete a message, I delete it.
04
The tip link is an ordinary link. Once you click it you are on Ko-fi and their rules apply. Ko-fi handles the payment, so your card details never reach this site or me. What Ko-fi passes on to me about a donation is described in Ko-fi's privacy notice.
A donation is income, so it goes into my books. That part I keep because the law says I have to, which is article 6(1)(c), and for as long as Belgian bookkeeping and tax rules require. A tip buys nothing in return, so beyond that record I keep no list of who gave one.
05
A plugin runs on your own website, on your own hosting, with your own accounts. It sends nothing back to me. What a plugin can reach, and what it can never reach, is listed on that plugin's own page, and its settings screen says the same before you connect anything.
06
The GDPR gives you the right to ask what I hold about you and to get a copy of it, to have it corrected, to have it deleted, to have the use of it restricted while a disagreement is sorted out, to object to my using it, and to receive it in a form you can take elsewhere. Send an email; there is no form. In practice the only thing I am likely to hold is an email conversation you started.
I answer within a month. Nothing here involves automated decisions or profiling, so there is nothing of that sort to object to.
You can also take it to the Belgian Data Protection Authority. You do not have to contact me first.