Privacy Policy

This English version is provided for convenience only. Only the German version is legally binding.

As of November 2026. Protecting your data matters to me. This website uses no cookies, no tracking and no analytics tools. Fonts, music and videos are hosted on this website's own server; no data is transferred to Google, YouTube, Spotify or other third parties when you visit. The English pages are an additional service; the processing described applies equally to both language versions.

1. Controller

2. Hosting and delivery of the website

The website is delivered via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary data, in particular your IP address, date and time, the page requested, browser type and operating system. This data is needed to deliver the website securely and quickly and to fend off attacks.

The legal basis is my legitimate interest in the secure and stable operation of the website (Art. 6 (1) (f) GDPR). A data processing agreement is in place with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR). Standard contractual clauses also apply.

Server log files

Cloudflare processes the access data mentioned above to deliver the website and protect it against attacks. I have not enabled any logging myself: there is neither permanent storage of access or function logs (e.g. "Workers Logs" or "Logpush") nor any analysis by me. According to its own documentation, Cloudflare does not store the logs of the form function. For data that Cloudflare processes in its own operations for security purposes, Cloudflare does not state a fixed period; the storage period depends on the respective purpose (see Cloudflare's privacy policy). The data is not combined with other data or analysed for advertising purposes.

3. Enquiry form and email

If you use the enquiry form, I process your details in order to answer your enquiry and send you a quote. These are: name, email address, selected project type, style, occasion, time frame and your message, as well as the time at which you confirmed the privacy notice. The legal basis is taking steps at your request prior to entering into a contract (Art. 6 (1) (b) GDPR).

Delivery via Brevo: To make sure your enquiry reaches me reliably, the web server sends these details by email via the email delivery service Brevo to my mailbox sb@yourmusic.studio. The provider is Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany (a subsidiary of Brevo SAS, Paris). Your email address is set as the reply-to address so that I can answer you directly. Your IP address is not transmitted to Brevo. Brevo processes the data solely on my behalf and according to my instructions; a data processing agreement is in place with Brevo (Art. 28 GDPR). For delivery and proof of sending, Brevo stores log data (sender, recipient, subject, time and delivery status) in accordance with this agreement and Brevo's privacy policy. In addition to Art. 6 (1) (b) GDPR, the legal basis for using Brevo is my legitimate interest in the secure and reliable delivery of enquiries (Art. 6 (1) (f) GDPR). The content of your enquiry is not stored on the web server.

Storage period: The email containing your enquiry is kept in my mailbox at IONOS (IONOS SE, Montabaur, Germany), with whom a data processing agreement is in place. I keep it for as long as it is needed to handle the enquiry and any resulting contract. If no contract is concluded, I delete it after six months at the latest. If a contract is concluded, the statutory retention periods under Section 147 of the German Fiscal Code (AO) apply – depending on the type of document, six years (e.g. business letters and emails relating to the contract), eight years (accounting vouchers such as invoices) or ten years (books and annual financial statements).

Protection against misuse: An invisible protective field ("honeypot") helps to detect automated spam; no additional data is collected for this. To prevent the form from being misused for mass emails, it is limited to three enquiries per ten minutes per internet connection, and the same enquiry is not sent more than once. For this purpose, the website briefly stores two entries in a database at Cloudflare (Cloudflare D1): a counter for a pseudonymised check value of your IP address, which expires after ten minutes at most, and an equally pseudonymised check value of the form data, which expires after one hour at most. The check values are generated with a secret key (HMAC-SHA-256); without this key, neither your IP address nor your details can be derived from them. Expired entries are no longer used from that point on and are permanently deleted the next time the form is used. Your IP address and the content of your enquiry themselves are not stored there. The purpose is protection against misuse and spam; the legal basis is my legitimate interest in the secure operation of the form (Art. 6 (1) (f) GDPR).

If you email me directly, I likewise process your details solely to answer your request.

4. Music, videos and fonts

All songs, previews, music videos and fonts are loaded directly from this website. Music videos and films only load when you click on them. Exception: on the "Projects" page, two short, silent background clips (about 3 MB in total) play in the FamilyMiles.Pro section. They are also loaded only from this website, and only once the section becomes visible. If your device has data saver or "reduce motion" enabled, they do not load at all. No services from YouTube, Spotify, Google Fonts or similar providers are embedded.

Links to Spotify, familymiles.pro or specialaigent.pro are plain links; they open in a new tab only after you click them. Exception: specialaigent.pro (also a project of mine) opens in a window on this page after you click. Only then is the page loaded from the specialaigent.pro server, which – as with any page request – receives your IP address; the specialaigent.pro privacy notice applies to this. When you close the window, the page is unloaded again.

5. No cookies, storage in your browser

This website does not set any cookies. Your choice on entering ("Enter with sound" or "Without sound") is stored only for the duration of the session in your browser's session storage (key "yms-sound"), so that the question does not appear again on every page. This information does not leave your device and is deleted when you close the browser. It is strictly necessary for the service you have requested (Section 25 (2) No. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG).

Protection against loading errors: If the website has just been updated, a page that is already open may be missing a program file. The page then reloads once. To prevent this from happening repeatedly, only in this case is the time of the reload stored in session storage (key "yms-reload"); no further reload takes place within five minutes. This information contains no personal data, does not leave your device and is deleted when you close the browser. It is strictly necessary for the website to display correctly (Section 25 (2) No. 2 TDDDG).

Demo game "Goal Run": If you start the game on the "Projects" page, it saves your progress (high score, coins collected, missions, chosen jersey, number of rounds and whether game sound is on) in your browser's local storage (localStorage, keys beginning with "yms-goalrun-"). This keeps your progress for your next visit. This data does not leave your device and is not transmitted to anyone. It remains stored until you delete it, which you can do in your browser settings via "Clear website data" for yourmusic.studio. Storage is necessary for the game function you have requested (Section 25 (2) No. 2 TDDDG). If you don't start the game, nothing is stored.

6. Your rights

You have the right at any time to

• access your stored data (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interests (Art. 21 GDPR),
• withdraw any consent given with effect for the future (Art. 7 (3) GDPR).

An informal email to sb@yourmusic.studio is sufficient.

7. Right to object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data based on my legitimate interest (Art. 6 (1) (f) GDPR). This concerns delivering the website via Cloudflare (section 2), delivering enquiries via Brevo and protecting the form against misuse (section 3). I will then no longer process your data unless I can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An informal email to sb@yourmusic.studio is sufficient.

8. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The competent authority is:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Heilbronner Straße 35, 70191 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de

9. Security

Data is transmitted in encrypted form via HTTPS. I use technical and organisational measures to protect your data against loss and unauthorised access.