Privacy Datenschutz
Last updated: TODO
What this site does not do
No analytics. No tracking pixels. No advertising. No third-party requests of any kind: the fonts are served from this domain, and the Content-Security-Policy forbids the browser from loading anything from anywhere else. No client-side JavaScript runs on any page. The appearance control in the footer stores nothing, which is why the choice applies to the page you set it on. There is no cookie banner because there is nothing to consent to.
The one cookie
One strictly functional cookie is set: ft, a signed timestamp that
proves a form submission came from a real page visit at a plausible speed. It
identifies nobody, contains no personal data, expires after four hours, and is
accepted only once. It is what lets the contact form resist bots without a
CAPTCHA.
The contact form
If you use the form we store the name, email address, company (if given) and message you submit, plus the time of submission, and nothing else. No IP address and no user agent are stored with the message. It is used solely to answer you, and deleted once the conversation is closed.
Hosting and processors
The site and its form endpoint run on Cloudflare Pages (Cloudflare, Inc.), acting as our processor under Art. 28 GDPR. Submission rate limiting briefly processes your IP address in memory; the counter it keeps is discarded within one hour and is never stored alongside a message.
Your rights
You may request access, rectification, erasure, restriction, portability, or object to processing at any time. Write to privacy@stratusworks.eu. You may also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde).