Privacy Policy

1. Controller and scope

The controller for this website is Sebastian Wolfgang Dichmann, trading as SD Nightshift Studio, Am Ziegelstadel 20, 87700 Memmingen, Germany. Email: sdnightshiftstudio@gmail.com. This policy covers the website. Processing within an app is described in that app's separate privacy policy.

2. Hosting and access data

The website is delivered through GitHub Pages by GitHub, Inc. When you open a page, server and security logs may process your IP address, date and time, requested URL, referrer, browser and device information, and technical status data. This supports delivery, stability, and security of the website.

Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website. GitHub is a recipient and technical hosting provider. Processing in the United States or other countries outside the EEA may occur. See the GitHub Privacy Statement and GitHub Data Protection Agreement for information about processing and safeguards.

3. External scripts and CDNs

Website pages load JavaScript for styling from Tailwind CSS via cdn.tailwindcss.com and icons from the UNPKG CDN at unpkg.com. Your browser connects directly to these services. At a minimum, the IP address, time, requested file, and technical browser data may be transmitted. Processing outside the EEA may occur.

Purpose and legal basis: Loading website resources used for layout and icons; Art. 6(1)(f) GDPR (legitimate interest in a functional and consistent presentation). See the npm Privacy Policy for information about npm/UNPKG. These scripts are also loaded on the website's legal pages.

4. Contact by email

If you contact us by email, we process your address, message, and any attachments to respond and handle necessary follow-up. The message is delivered through our email service; the contact address uses Gmail by Google.

Legal basis: Art. 6(1)(b) GDPR if your inquiry concerns a contract; otherwise Art. 6(1)(f) GDPR (handling and responding to inquiries). We delete messages when the inquiry is resolved unless statutory retention or evidence duties, or legitimate claims, require us to keep them.

5. Retention and international transfers

Server and security logs are deleted or overwritten according to the hosting provider's retention and security periods. The exact period may depend on the provider's settings and rules. We keep email messages only as long as needed for the inquiry, legal duties, or establishing or defending claims.

GitHub, Google/Gmail, and the CDN services may process data outside the EEA. Where an international transfer occurs, it is made only under a transfer mechanism permitted by GDPR Chapter V. You can request information about the mechanism applicable to a specific transfer and a copy of the safeguards using the email address above. The linked provider information also applies.

6. Your data protection rights

Where statutory requirements are met, you can request access, rectification, erasure, restriction of processing, and data portability, and object to processing. You may withdraw consent at any time with future effect. Contact the controller using the details above.

You may also lodge a complaint with a data protection supervisory authority. For non-public entities in Bavaria, this includes the Bavarian State Office for Data Protection Supervision (BayLDA); you may also contact the authority where you usually live.

7. Changes

We update this policy when website processing or legal requirements change. The date above shows the latest version.