Privacy policy

We collect as little as we can. This website has no analytics, no advertising and no tracking cookies, and everything on it, including fonts and scripts, loads from our own server.

Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is:

Name of the owner or company Street and number, postcode and city Germany [email protected]

When you visit the website

To show you a page, our server has to receive the technical data your browser sends with every request: your IP address, the page you asked for, the date and time, and details such as your browser and operating system. We use this only to deliver the website and keep it secure (Art. 6(1)(f) GDPR, our legitimate interest in a working, secure website).

We don't keep a record of the pages you visit with your full IP address. Where requests are logged at all, for troubleshooting and to fend off attacks, the IP address is shortened first so it no longer points to you, and logs are deleted automatically on a rolling basis.

Cloudflare

Requests to this website pass through Cloudflare, which protects it against attacks and delivers it quickly. Cloudflare processes the technical data described above, including your IP address, on our behalf. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework, and we have a data processing agreement with it (Art. 28 GDPR). Legal basis: Art. 6(1)(f) GDPR. More in Cloudflare's privacy policy.

Hosting

The website runs on a server rented from hosting provider, name and country, which processes data only on our behalf and under our instructions (Art. 28 GDPR).

Cookies

When you open a page with our project form, your browser stores one small security cookie (csrftoken). It makes sure a form sent to us really came from our page, and it contains no information about you. Because the form can't work securely without it, it doesn't need your consent (§ 25(2) no. 2 TDDDG). It expires after a year, and you can delete it in your browser at any time.

We don't use cookies for analytics, advertising or tracking. Our own team's sign-in to the site's administration uses a session cookie, which visitors never receive.

When you send us a project brief

If you use the form on our homepage, we receive your name, your email address, what you need, your business name or website if you give it, your message, and whether you'd like a call first. We use this to reply to you and prepare a proposal or quote (Art. 6(1)(b) GDPR, steps taken at your request before a contract). Only your name and email address are required.

Your brief is stored in our website's database and sent to our inbox by email. To protect the form from automated spam, we also store a scrambled code derived from your IP address, which changes every day, so it can't be linked across days or turned back into your address; we delete it after 30 days.

If your brief doesn't lead to a project, we delete it within 12 months. If we do work together, we keep it with the project records for as long as the law requires us to keep business correspondence.

When you email us

If you email us, we use your email address and message to answer you (Art. 6(1)(b) GDPR for questions about a project, otherwise Art. 6(1)(f) GDPR). We keep the conversation as long as needed for your request, and longer only where the law requires it.

Links to other websites

This website links to other sites, such as the products in our work section. Nothing is sent to those sites until you click a link; after that, their privacy policies apply.

Your rights

You can ask us at any time what data we hold about you and get a copy of it, and have it corrected or deleted. You can also ask us to restrict how we use it, to hand it over in a common format, or object to processing based on our legitimate interests (Art. 15 to 21 GDPR). Just email [email protected].

You also have the right to complain to a data protection supervisory authority, for example the one where you live or the one responsible for us (Art. 77 GDPR).

Last updated: 12 October 2026