Privacy policy
Controller
Anna Muller, Fuldastraße 55B, 12043 Berlin, annamullerdaz@gmail.com
Hosting
This is a static website. When you request a page, the hosting provider processes technically necessary connection data (e.g. IP address, time, requested address) to deliver the pages and protect against abuse. The hosting provider is Cloudflare (Cloudflare, Inc., USA, using Cloudflare Workers); how long Cloudflare keeps this connection data is described in Cloudflare's privacy policy.
Hallway planner and saved projects
All hallway planner calculations run in your browser. Room dimensions, furniture and project names are not sent to us or third parties. If you explicitly save a project, your browser stores it in local storage on your device; you can delete it in the planner or through your browser settings. You keep exported files yourself. Ideas you add to your saved list are likewise kept only in your browser's local storage and are not sent anywhere.
Contact form
When you send the contact form, your name (optional), your email address and your message are transmitted to a server function at Cloudflare (Cloudflare Workers) and forwarded as an email via Cloudflare's email service (Cloudflare Email Service) to the mailbox named in the legal notice. That mailbox is hosted by Google (Gmail). The website itself does not store or log your name, email address or message. The email stays in the mailbox until it is no longer needed to answer you.
To protect against automated messages the form uses Cloudflare Turnstile. Its script is loaded from challenges.cloudflare.com only once you use the form; Cloudflare processes technical characteristics of your browser and your IP address for this. To limit the number of messages and prevent duplicate delivery, we keep for at most 48 hours, in a Cloudflare D1 database, a keyed hash of your IP address with a counter and a keyed hash of the message id, but not your name, email address or message text. Cloudflare and Google may process data outside the EU. You can email us directly instead.
Search and fonts
Search and fonts are loaded from this domain; no data is sent to third parties for them.
Analytics
We use Cloudflare Web Analytics (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA) to count how often pages are viewed and where visits come from (for example Pinterest). For this every page loads a small script from static.cloudflareinsights.com. It sends the requested address, the referring page, browser, operating system, device type, country and loading times to Cloudflare. According to Cloudflare, Web Analytics sets no cookies, uses no local storage, does not fingerprint your device and builds no profiles; your IP address is used only for the transfer. We see aggregated numbers only. The legal basis is our legitimate interest in data-minimal audience measurement (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework.
Google Analytics 4
We also use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It shows us which pages and ideas are viewed, where visits come from (for example Pinterest), how long they last and which features are used. For this every page loads a script from googletagmanager.com. Google Analytics sets the cookies “_ga” and “_ga_…” (kept for up to 2 years) to recognise returning browsers. Among other things it transmits the requested address, the referring page, time, browser, operating system, device type, screen size, language and your approximate location (country, region, city), derived from your IP address; according to Google, Google Analytics 4 does not store the IP address itself. Google signals and personalised advertising are switched off. The hallway planner only reports which feature was used, with the language and a template id; room dimensions, furniture lists, project names and file contents are not sent. Analytics data is kept in Google Analytics for at most 14 months.
The legal basis is our legitimate interest in understanding how our site is used so we can improve the content (Art. 6(1)(f) GDPR). Google may process data in the USA; Google LLC is certified under the EU-US Data Privacy Framework. You can object by blocking or deleting cookies in your browser or by installing Google's browser add-on to opt out of Google Analytics (tools.google.com/dlpage/gaoptout). More information: Google's privacy policy (policies.google.com/privacy). Microsoft Clarity and Google Tag Manager containers are not used.
The Pinterest save buttons are plain links. No Pinterest script is loaded on our pages and no data is sent to Pinterest when you view them. Only when you click such a button, or arrive from Pinterest, does Pinterest's privacy policy (Pinterest Europe Ltd., Dublin, Ireland) apply to your visit there.
Advertising (Google AdSense)
The site is funded partly by advertising. For this we use Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). When you open a page, your browser loads a script from pagead2.googlesyndication.com. Google receives your IP address, technical details of your browser and device and the address of the page, in order to serve ads, measure their delivery and prevent fraud.
Whether Google may store or read cookies or similar technologies on your device for this and personalise ads to your interests is asked by Google itself on your first visit, in its own consent message (a Google-certified platform under the IAB Transparency & Consent Framework). The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without consent Google shows only non-personalised or limited ads. This choice covers advertising only, not the analytics described above. You can change or withdraw your advertising consent at any time via the privacy settings link Google shows on the pages.
Google may process data in the USA; Google LLC is certified under the EU-US Data Privacy Framework. How Google uses data from sites that use AdSense is explained at policies.google.com/technologies/partner-sites; you can also turn off personalised ads at myadcenter.google.com. Ads are labelled “Ad” on the page.
Your rights
Under the GDPR you have, in particular, the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a data protection supervisory authority.