Privacy Policy

Controller

Accessing the website and hosting

Technical data is processed when you open this website so that it can be delivered and protected against misuse. This may include your IP address, time of access, requested URL, browser and operating system, referrer, amount of data transferred and HTTP status. The legal basis is Article 6(1)(f) GDPR.

The website is hosted by Vercel Inc. Vercel processes connection data when delivering the pages. As a US provider, Vercel may also process data outside the European Economic Area; its linked privacy notice explains the transfer safeguards.

Technical logs are kept only as long as needed for operation, troubleshooting and security, unless a security incident or legal obligation requires longer retention. The specific periods depend on the Vercel plan and configuration in use.

External scripts and fonts

Some interactive pages load React, React DOM and Babel from unpkg.com. When these files are requested, the provider receives technical connection data, especially your IP address. These scripts are needed to display the interactive pages. The legal basis is Article 6(1)(f) GDPR. See unpkg for more information.

Archivo and IBM Plex Mono fonts are served directly by this website. Displaying the fonts does not contact Google Fonts.

Cookies and local storage

This version does not set advertising cookies. Your traffic-statistics choice is saved in your browser's local storage (fcs-privacy-choice-v4) until you delete it in the browser or change it on the site. A short-lived session storage entry (fcs-home-return) controls the animation when moving between pages and is then removed.

These entries support your chosen setting and site navigation. The legal basis for any related processing of personal data is Article 6(1)(f) GDPR. Storage on your device that is necessary for these functions falls under Section 25(2)(2) TDDDG.

Optional traffic statistics

If you consent, we load Vercel Web Analytics. Page views and technical details such as the page visited, referrer, approximate country, browser and device are sent to Vercel and used for aggregate statistics. According to Vercel, Web Analytics does not use third-party cookies; the visitor hash used to recognise a visit is discarded after 24 hours.

The legal basis is your consent under Article 6(1)(a) GDPR. Without consent, the analytics script is not loaded. You can change your choice at any time through “Cookie settings”. Withdrawal applies to future processing and does not affect earlier lawful processing.

How long aggregate reports remain visible and stored depends on the Vercel plan. Vercel may retain data beyond the visible reporting window; see Vercel's retention information.

Contacting us

If you contact us by email, we process your address, name, message and any links or files you send to respond and, where relevant, prepare a possible project. The legal basis is Article 6(1)(b) GDPR for service enquiries and Article 6(1)(f) GDPR for other questions.

When you submit the contact form, your name, email address, message and optional track link are sent through Web3Forms to my Google Gmail inbox. Web3Forms also processes technical connection data and checks submissions for spam. The connection is made only when you submit the form.

Messages in my inbox are kept for as long as needed to deal with your enquiry or work together. Statutory retention duties for business records still apply. According to its privacy policy, Web3Forms retains form submission data for a maximum of three years unless it is deleted earlier or a shorter period applies. The provider operates from India and uses infrastructure in multiple regions; its privacy policy describes processing and international transfers.

Studio assistant

The assistant does not currently store conversations permanently. Without a connected AI service, it answers using local FAQ content in your browser.

The plan is to send chat messages to the OpenAI API to generate answers and store the conversation in a Supabase project in Frankfurt (eu-central-1). Messages are intended to be deleted automatically after 30 days. This transfer and storage are not enabled yet. The deletion mechanism and OpenAI details must be checked before activation.

Links to other websites

Linked platforms and articles are external websites. Their privacy information applies when you open such a link.

Your rights

Subject to the GDPR, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests. You may withdraw consent at any time with effect for the future.

To make a request, email fuzz.cube.studio@gmail.com. You may also complain to a data protection authority, for example the Baden-Württemberg Commissioner for Data Protection and Freedom of Information.