Privacy Policy.

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

No data protection officer has been appointed, as there is no legal obligation to do so.

Summary

• No cookies, no tracking, no analytics or marketing tools.
• Fonts, scripts, images, videos and 3D models are part of this website and are delivered exclusively through its hosting (Cloudflare) – no connections to further third-party providers are made.
• Personal data is only processed where this is necessary to operate the website securely (server log files) or to answer your inquiry.
• Your data is neither sold nor used for advertising.

Hosting and server log files

This website is provided via the Cloudflare Workers platform of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare delivers the website through a global network of data centres; your request is usually answered by a data centre near you. Cloudflare processes the data listed below on my behalf, based on the data processing agreement pursuant to Art. 28 GDPR (Data Processing Addendum) that forms part of Cloudflare’s terms of service.

Server log files

Each time the website is accessed, your browser automatically transmits information that the server stores in so-called log files:

• IP address of the requesting device
• date and time of access
• requested page or file
• referrer URL (the previously visited page)
• browser and operating system used (user agent)
• HTTP status code and amount of data transferred

This data is required to deliver the website, to ensure its stability and security and to fend off attacks. It is not combined with other data sources or analysed for marketing purposes. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in the secure and error-free operation of the website.

I do not analyse access logs myself. For troubleshooting the contact form, technical logs of its requests (without the form content) are kept for no more than three days and then deleted automatically. In addition, Cloudflare processes connection data to deliver the website and fend off attacks, and deletes it according to its own retention periods.

Transfer to the USA

Cloudflare is based in the USA, so processing of your data there cannot be ruled out. Cloudflare is certified under the EU-U.S. Data Privacy Framework; transfers to Cloudflare are therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR). In addition, the data processing agreement contains the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR).

SSL/TLS encryption

For security reasons and to protect confidential content – such as your inquiry via the contact form – this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar. Unencrypted requests are automatically redirected to the encrypted connection.

No cookies, no tracking

This website does not set cookies and does not store or read any information on your device for analytics, tracking or marketing purposes. No analytics services (such as Google Analytics), tracking pixels, social media plugins or embedded third-party content (such as YouTube videos or maps) are used. A cookie banner is therefore not required.

Contact form

If you send me an inquiry via the contact form, I process the data you enter:

• name and e-mail address (required)
• company (optional)
• selected topic and – optionally – a budget range
• your message (required)
• time of the inquiry and language of the website

Purpose and legal basis: The data is used exclusively to process and answer your inquiry. The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to a contract or to taking steps prior to entering into a contract, and otherwise Art. 6(1)(f) GDPR – my legitimate interest lies in answering inquiries addressed to me.

Transmission: Your input is transmitted in encrypted form to Cloudflare and delivered from there as an e-mail to my mailbox via Cloudflare’s e-mail service (Email Routing). My mailbox is operated by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Outlook.com). Inquiries are not stored in any database, and no automatic confirmation e-mail is sent to you.

Protection against spam and abuse

To protect against automated mass submissions, the form uses an invisible check field and a timing check (time between loading and submitting the form); no personal data is stored for these checks. In addition, the number of inquiries per sender is limited (no more than three per minute). For this purpose, a SHA-256 hash is derived from your IP address (pseudonymised) and kept as a counter at Cloudflare for one minute only; your IP address itself is not stored. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in protecting the contact form against spam and abuse.

Retention period

Your inquiry is deleted as soon as it has been dealt with conclusively and no statutory retention obligations apply. Inquiries that do not lead to an assignment are deleted no later than six months after the communication has ended. If your inquiry leads to an assignment, the statutory retention periods under German commercial and tax law (§ 257 HGB, § 147 AO) apply to business-relevant correspondence.

Voluntary provision

Providing your data is voluntary. Without the required information, however, I cannot process your inquiry. Alternatively, you can always write to me directly by e-mail.

Contact by e-mail

If you write me an e-mail, I process your e-mail address, your name (if provided) and the content of your message in order to answer your request. Purpose, legal bases and retention period correspond to the information on the contact form. E-mails to addresses at firesword.de are forwarded via Cloudflare Email Routing to my mailbox at the e-mail provider named above.

Fonts and content – hosted locally

All fonts (Geist, Geist Mono), scripts, images, videos and 3D models are part of this website and are delivered exclusively through its hosting at Cloudflare. When you visit the website, no connection is made to the servers of further third parties – such as Google Fonts.

Recipients and third countries

Recipients of personal data are Cloudflare as processor (hosting, contact form and e-mail forwarding) and the provider of my mailbox named above. Data is only passed on to other third parties if I am legally obliged to do so. For possible processing in the USA, see “Transfer to the USA” in the hosting section.

Your rights

With regard to your personal data, you have the following rights vis-à-vis me:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)

I will inform any recipients of your data about a rectification, erasure or restriction (Art. 19 GDPR). An informal message to kontakt@firesword.de is sufficient to exercise your rights.

Right to object pursuant to Art. 21 GDPR

Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your data infringes the GDPR (Art. 77 GDPR). In particular, you can contact the supervisory authority of your place of residence or the authority responsible for me:

Further information

There is no automated decision-making, including profiling (Art. 22 GDPR).

I will update this privacy policy whenever the website or the legal requirements change. The version published here applies.

Last updated: November 2026