Privacy

This website is built to collect as little as possible: it sets no cookies of its own, uses no analytics or tracking, and loads nothing from other companies’ servers. Fonts, images, videos and the interactive demos are all served from this site. The demos store a few technical settings in your browser, described below.

Controller

Hosting and server logs

The site is hosted on Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit, Cloudflare necessarily processes technical data such as your IP address, the date and time, the page requested and your browser’s user agent, in order to deliver the site and protect it from attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website). Cloudflare processes this data on our behalf under a data processing agreement (Art. 28 GDPR); transfers to the USA rely on Cloudflare’s certification under the EU–US Data Privacy Framework (Art. 45 GDPR). Logs are kept only as long as needed for these purposes. To protect the site, Cloudflare can set a strictly necessary security cookie (such as __cf_bm) when it detects unusual traffic; it is not used for tracking (§ 25(2) no. 2 TDDDG). Cloudflare Web Analytics is not enabled for this site.

Interactive demos

The three demos under /demos/ run entirely in your browser and send nothing anywhere. Two keep small technical settings on your device, only for the demo you are using: HINOKO remembers in session storage whether its intro and hints have already played (deleted when you close the tab); the VandaVerse flight game keeps your personal best, the nickname you type and your sound setting in local storage (delete it any time through your browser’s site data). Legal basis: § 25(2) no. 2 TDDDG (strictly necessary for the function you are using). In the VandaVerse demo, the leaderboard, email sign-up and members-only collection of the original site are switched off: nothing you enter there is sent or stored.

Email

If you reply to an email from VV’sVision or write to us, your message and contact details are used only to answer you and, if you wish, to prepare and carry out a project. Legal basis: Art. 6(1)(b) GDPR (steps before or under a contract) and Art. 6(1)(f) GDPR (answering inquiries). Email is handled through Google Gmail (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Your data is deleted when it is no longer needed, unless statutory retention periods (for example for business and tax records) require it to be kept.

Business research and outreach

VV’sVision looks for independent businesses whose websites it could improve. It uses openly licensed map data (Overture Maps, OpenStreetMap) and visits the business’s public website, measuring things like loading time and accessibility with automated tests and taking screenshots. It records the business’s name, location, website and, if the business publishes one on its own website, a business email address together with the page where it appeared. These records are kept on the operator’s computer in Germany; emails are handled through Google Gmail (see above). Nothing is bought from data brokers, sold or shared.

A business may receive one email about its website, and only where the rules of its country allow it. Each email says where the address came from and how to opt out. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in offering our services to businesses). You can object at any time (Art. 21 GDPR): reply “no thanks”, use your email program’s unsubscribe button, or write to the address above. Your address is then added to a do-not-contact list straight away and never emailed again; that minimal entry is kept so the request stays honoured. Research records are kept while a collaboration is possible and deleted on request.

Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability, and to object to processing based on legitimate interests (Art. 15–21 GDPR). To use them, email the address above. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work.

Changes

This notice is updated whenever the website changes how it handles data. Last updated: 27 October 2026.