Access
Request information about stored data, its origin, and its purpose.
LEGAL_NODE / 02
Privacy Protocol
Data protection declaration
DOCUMENT / PUBLIC
SCOPE / WEBSITE
STORAGE / MINIMIZED
01 / Controller information
The responsible party for data processing on this website is:
Ruhlan Jafarli
Westendstraße 170
80686 München
Germany
02 / Website data minimization
This website is configured to minimize data stored in a visitor’s browser. PostHog analytics uses memory-only persistence: it does not use analytics cookies, local storage, or session storage, and it does not maintain an identifier between page loads.
Do Not Track and Global Privacy Control signals prevent the analytics client from starting. Session recording, heatmaps, surveys, and person profiles are disabled in the website configuration.
On this Privacy Policy and on the Impressum, the analytics layer permits the page view only and suppresses other tracked interactions. Form-field contents are excluded from analytics capture.
03 / Data collection
Server log files
The providers involved in serving these pages may automatically receive technical request information transmitted by your browser:
- Browser type / version
- Operating system
- Referrer URL
- Host name
- Request time
- IP address
Contact and product-update forms
When you submit a form, the server validates the submission, applies anti-spam and rate-limit checks, and sends the submitted information through Resend to the Sevenoir mailbox. For contact inquiries, that information may include your name, email address, organization, role, inquiry type, and message. A submission may also trigger an acknowledgement email to the address supplied.
Cloudflare Turnstile verifies form submissions to prevent automated abuse. JavaScript is required for this verification; you can also email hello@sevenoir.com directly. Shared rate limits use keyed hashes of the request IP address and normalized email address. Security logs record decisions and hashed identifiers without the submitted message, raw email address, raw IP address, or verification token. Rate-limit counters expire automatically; the longest configured window is 24 hours, and overlapping window counters may remain for up to 48 hours plus a one-second expiry margin. Hosting-log retention is configured separately.
Acknowledgements confirm receipt without repeating your message, name, organization, or submitted links. Cloudflare’s Turnstile Privacy Addendum describes its security processing.
The existing policy identifies consent under Article 6(1)(a) GDPR as the basis for form processing. Consent can be revoked using the contact details above.
Analytics and performance measurement
PostHog is used to understand page views and interactions with links and buttons. The implementation removes form values from analytics data and disables persistence between page loads. Vercel Speed Insights is loaded for technical performance measurement.
Analytics is configured on the basis of legitimate interest under Article 6(1)(f) GDPR. You can object using the controller contact details or prevent analytics initialization by sending a Do Not Track or Global Privacy Control signal.
04 / Rights of data subjects
Rectification
Request correction of inaccurate or incomplete data.
Erasure
Request deletion of data where the applicable conditions are met.
Portability
Request data in a machine-readable format where applicable.
05 / Infrastructure and service providers
External providers are used to operate the website, measure its technical use, and deliver the messages you send. Each entry below states the role represented by the current website and policy sources.
Vercel
Hosts this website and serves it to your browser. The site also loads Vercel Speed Insights for technical performance measurement. Hosting and performance requests may include technical request data such as an IP address.
Cloudflare
Provides DNS and content delivery infrastructure. Cloudflare Turnstile also protects public forms against automated abuse and may process technical browser and network signals, including an IP address, for security verification.
Upstash
Provides shared Redis storage for public-form rate limits. Rate-limit keys use keyed hashes of IP addresses and normalized email addresses, rather than those raw identifiers. Form messages and verification tokens are not stored in Redis.
Google Workspace
Hosts the hello@sevenoir.com and ruhlan@sevenoir.com mailboxes and therefore processes correspondence sent to those addresses.
Resend
Delivers contact-form and product-update submissions to the Sevenoir mailbox and may deliver an acknowledgement to the submitted email address. It processes the form information needed for those messages.
PostHog
Provides website analytics through the site’s own /ingest path. It is configured with memory-only persistence, without analytics cookies or browser storage, with person profiles and session recording disabled. Do Not Track and Global Privacy Control signals are honored.
No specific retention period, certification, data-processing agreement, or international-transfer mechanism is asserted here unless it is represented by the current implementation or existing policy source.