Last updated: August 6, 2026
Who is responsible
This website, fisherofkids.com, is operated by Steven Keen, the writer, director, and producer of the film. The controller responsible for the personal data processed here is:
Stephan Christopher Kuehn
(operating as Steven Keen)
Achlada Maleviziou 157
715 00 Heraklion, Crete
Greece
Email: me [at] stevenkeen [dot] com
A Data Protection Officer is not required for a website of this nature and has not been appointed; you can contact the controller directly on any data-protection matter.
Server logs
When you load a page, our hosting provider (Mittwald CM Service GmbH & Co. KG, Germany) automatically processes standard technical data in its server logs—your IP address, the page requested, the date and time, and your browser and operating system. This is necessary to deliver the site securely and to detect abuse (legal basis: legitimate interest, Art. 6(1)(f) GDPR). These logs are retained for 60 days and then deleted.
Analytics
We use Umami, a privacy-friendly, cookieless analytics tool that we self-host on our own infrastructure. Our hosting and our analytics both run on Mittwald's servers in Germany, with Cloudflare in front as our content-delivery and security layer. It records aggregate statistics—such as page views, referring sites, and approximate location, resolved no more precisely than country level—without setting cookies and without building any profile of you. It stores no IP address, no name, no email address and no account. To tell one visit apart from another it derives a short hash from your IP address, your browser string and this site's identifier, mixed with a secret salt that Umami rotates on a schedule—monthly for sessions, hourly for individual visits. That hash cannot be turned back into your IP address, and once the salt has rotated it can no longer be matched to a later one; but for as long as a salt lasts it does tell one reader from another, so we treat it as personal data rather than call it anonymous. Analytics records are retained for 24 months, after which they are deleted or reduced to monthly totals that carry no visitor hash and cannot be traced back to a single visit. Nothing is stored on your device, so no cookie banner is required. To opt out, switch on Do Not Track or Global Privacy Control in your browser: we stop counting you immediately, here and on every other site we run.
Content delivery & security
DNS, content delivery, and basic security (bot and DDoS protection) are provided by Cloudflare, Inc. (USA). To route and protect requests, Cloudflare processes your IP address and may set a single strictly-necessary security cookie (no tracking). Cloudflare is certified under the EU–U.S. Data Privacy Framework, and transfers are additionally covered by Standard Contractual Clauses (legal basis: legitimate interest). These security and delivery logs are generated and held by Cloudflare for abuse detection and attack mitigation, and then deleted. Cloudflare sets that period itself and publishes no fixed figure for it, stating only that it keeps such data for a limited period; we do not receive, export or store these logs, so we can neither shorten nor extend it.
Cookies
This site sets no cookies of its own and stores nothing on your device. Cloudflare, which routes and protects this site, may set a strictly necessary security cookie to separate trusted visitors from malicious traffic. This requires no consent, so there is no cookie banner.
Fonts
All fonts are served directly from this website. No font, script, or stylesheet is loaded from any third-party server such as Google Fonts, so your IP address is not shared with them.
The trailer
The film preview is hosted on Vimeo. The Vimeo player loads only after you actively click to play it—until then, no connection to Vimeo is made. Once you play it, Vimeo (Vimeo, Inc., USA) may process data in accordance with its own privacy policy; Vimeo is certified under the EU–U.S. Data Privacy Framework for transfers to the United States.
External links
We link to third-party sites such as IMDb, Facebook, our partner organizations and stevenkeen.com. We are not responsible for their content or their privacy practices.
If you email us
If you write to us, we process your email address and the contents of your message solely to respond to you, and for no other purpose.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. These rights apply to data that identifies you, which our analytics counts do not—your right to object always applies. For analytics, switch on Do Not Track or Global Privacy Control and we stop counting you at once. To exercise any of these, email me [at] stevenkeen [dot] com. You also have the right to lodge a complaint with a supervisory authority—in Greece, the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifissias Avenue 1-3, 115 23 Athens, Greece.
Automated decision-making
We do not use your personal data for automated decision-making or profiling.
Changes to this policy
We may update this policy from time to time; the date above always reflects the current version.