Privacy Policy

Controller

The controller responsible for data processing on this website is:

Full contact details are in the Imprint.

What we collect, and why

Server log files

When you visit this site, the web server automatically records technical data that your browser transmits: the requested URL, date and time of access, the HTTP status and volume of data transferred, the referring page, and your browser and operating system. Your IP address is processed transiently to deliver the page and is not combined with other data to identify you.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable, correctly delivered pages). Logs are kept only as long as needed for operation and security.

Analytics — Umami (first-party, cookieless)

We use Umami, an open-source analytics tool that we host ourselves on our own infrastructure within the European Union — no data is sent to a third-party analytics provider. Umami is cookieless: it sets no cookies and stores nothing on your device, and it does not track you across websites. It records aggregate, non-identifying metrics such as page views, referrer, approximate region (derived from the IP address, which is not stored), and device/browser type. It also counts a small, fixed set of interactions with the page — for example which install option you chose, or that an outbound link was followed — so we can tell which parts of the site are useful. Those counts carry no identifier and are not tied to you.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding, in aggregate, how the site is used). Because no information is stored on or read from your device, no separate cookie consent is required.

Files fetched by the Atelier software

Two files on this site are read by machines rather than browsers: the installer (install.sh) and the curated model recommendations (models.yml), which an Atelier installation fetches only when someone running it explicitly asks it to check for updated model suggestions. Because these fetches run no JavaScript, we count them the same way we count a page view — the request is logged as described above and recorded as an aggregate event. Nothing is sent from the Atelier installation: it is a plain download, and it carries no site identifier, no configuration, and no content. Atelier itself contacts us at no other time.

Fonts and assets

All fonts, styles, scripts and images are served from this domain. We do not load Google Fonts, CDNs, or any other third-party resources, so visiting the site sends no data to external hosts.

Contact by email

If you email us, we process your message and contact details solely to handle your enquiry (Art. 6(1)(b)/(f) GDPR) and retain them no longer than necessary.

Hosting

This site is hosted on a server located in Germany, operated by a hosting provider acting as a processor on our behalf under Art. 28 GDPR. The site is a set of static files with no server-side application; the provider processes the connection data needed to deliver and secure those pages (e.g. IP addresses in access logs) on our behalf, governed by a data processing agreement. Our analytics is handled separately by our own EU-hosted Umami, as described above.

International data transfers

All processing of your data — hosting, server logs and analytics (Umami) — takes place on infrastructure located within the European Union / European Economic Area. We do not transfer your personal data to a third country outside the EEA.

No transfer to third parties

We do not sell your data and do not share it with third parties for advertising. Data is disclosed only where legally required or to processors acting on our instructions (e.g. hosting) as described above.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• rectification of inaccurate data (Art. 16);
• erasure (Art. 17) and restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interest (Art. 21); and
• lodge a complaint with a supervisory authority (Art. 77) — in Hamburg, the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit.

To exercise any of these, email the controller above.

Changes to this policy

We may update this policy to reflect changes to the site or the law. The current version always lives at this URL; the date at the top shows when it last changed.

See also our Imprint.