Privacy

Controller

The controller is the person named in the imprint. See the Impressum.

What this site does

• This site sets no cookies.
• Fonts are served from this domain. No requests go to Google Fonts or any other font CDN.
• Page statistics are collected without cookies, without fingerprinting and without a third-party script, and are stored on infrastructure operated for this site. They record which section of the page was reached and which outbound link was clicked. They do not identify you.
• Links to Steam, Discord, GitHub and, where shown, X and LinkedIn lead to those services; their own privacy terms apply once you are there.
• If you type a name to have it printed, the name and the photo of the printed label are kept for fifteen minutes and then deleted. The label itself stays on a stack in a cellar.
• If you write to the address in the imprint, your message is kept for as long as the conversation needs it.

Hosting and server logs

The site is delivered by Cloudflare, Inc. (Workers with Static Assets) from data centres in the EU and worldwide, under a data processing agreement and the EU–US Data Privacy Framework. To deliver a page Cloudflare necessarily processes your IP address, the requested URL, and browser headers for the duration of the request and in short-lived security logs. Legal basis: Art. 6(1)(f) GDPR, the legitimate interest in operating a website securely. The controller does not receive or keep these logs.

Page statistics

The site's own script sends small events to /api/beat on this domain. Each event contains: an event name (for example beat_3_staged or cta_staged_steam), the page path, which renderer your browser used (WebGPU, WebGL2, video or static text), the host name of the referring site if any, a short label, one number, and the country your request came from. Nothing else. No IP address, no user-agent, no cookie, no local storage, no fingerprint, no identifier that could connect two events to the same person. Events are stored for at most 90 days in Cloudflare Analytics Engine. Browsers that send the Global Privacy Control signal are not counted at all. Legal basis: Art. 6(1)(f) GDPR, the legitimate interest in knowing which sections of a long page are actually read. Because no personal data is involved, no consent is requested.

Printing your name

At the end of the printer section you can type a name. Only letters, hyphens, apostrophes and spaces are accepted; no digits, no addresses, no URLs. The name is placed into a fixed label template, rendered on this site's server, queued, and printed on a physical label printer in the owner's cellar. A camera pointed at the printer's output slot, and at nothing else, takes one photograph of the printed label so you can see it. The name you typed and that photograph are deleted after 15 minutes. What remains is a running number and a daily count; neither is connected to you. Legal basis: Art. 6(1)(b) GDPR, because you asked for the print. Do not type another person's name.

Contact by email

If you write to the address in the Impressum, your email address and message are processed to answer you and kept for as long as the conversation needs it, then deleted. Legal basis: Art. 6(1)(b) GDPR for pre-contractual requests, otherwise Art. 6(1)(f) GDPR.

Links to other services

Links to Steam (Valve Corporation), Discord (Discord Inc.), GitHub (GitHub, Inc.) and the product sites open those services. This site embeds nothing from them: no widgets, no pixels, no fonts. Their privacy terms apply once you are there.

Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), and the right to lodge a complaint with a supervisory authority. In Austria that is the Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb@dsb.gv.at.

Changes

This page describes the current build of the site. When a data flow is added, this page changes in the same commit, and the change is visible in the site's public source.