Privacy Policy
This policy explains how Danube Studios handles personal data on this website (danubestudios.dev), on our product websites (such as chess.danubestudios.dev), on our link service (go.danubestudios.dev), on our official social media accounts and when we use social media platforms' interfaces to publish our own content. Each of our products has its own privacy notice for the data processed inside that product.
Controller
Perjan ProfessionalProductPartners FlexKapG (brand: Danube Studios), Heiligenstädter Lände 29/2.OG, 1190 Wien, Austria. Contact: support@danubestudios.dev.
This website
This website uses no cookies, no analytics and no tracking. It is delivered by Cloudflare, Inc. (content delivery and security), which processes your IP address and technical request data to deliver the pages and protect them against attacks. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
Product websites
Our products have their own pages on subdomains of danubestudios.dev (for example chess.danubestudios.dev). They are delivered by Cloudflare as described above. To see which channels bring visitors, our server records a page-view event each time a page is loaded. The event holds: the page address, with only our own campaign tags kept from the link (such as utm_source; other parameters are dropped); the domain of the site that linked to us (never the page or search terms); your browser's user-agent string (browser, operating system and device type); the country Cloudflare derives from your IP address; the time; and a random event ID that is new for every event. No script runs on your device for this, no cookies are set, and nothing is stored on or read from your device. Known bots, link previews and prefetches are not recorded. We store neither your IP address nor any identifier, and we do not link page views to each other or to you. They are not anonymous in the strict sense: someone who already knew the exact time of a visit and the browser's user-agent string could match one event to it; we hold no such information and never try. The events are processed by PostHog Inc. in its EU data region and kept for up to seven years, PostHog's retention period on our plan; PostHog offers us no shorter setting. Legal basis: our legitimate interest in knowing which channels bring visitors to our products (Art. 6(1)(f) GDPR).
Waitlists
Some product websites let you join a waitlist. We then store your email address, the time you signed up, the version of the notice you agreed to and the campaign tags of the link that brought you, in a database operated by Cloudflare, Inc. in the EU. We use your address only to tell you when you can use the product and to send your invite, and we send invites only to confirmed addresses. To stop automated signups, Cloudflare's rate limiter receives a one-way hash of your IP address for one minute; we store neither. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by emailing us. Each product's privacy notice says how long it keeps the addresses; for Chess Coach see chess.danubestudios.dev/privacy.
Link service (go.danubestudios.dev)
Links in our social media profiles and posts may point to go.danubestudios.dev, which forwards you to the destination. For each click we record an event with the link, the time, a random event ID, the domain of the referring website (not the page), the country derived from your IP address by Cloudflare, and your browser's user-agent string. Clicks by known bots and link previews are not recorded. We set no cookies, do not store your IP address and do not link clicks to each other or to you. We use these events, processed with PostHog Inc. in the EU and kept for up to seven years (PostHog's retention period on our plan), to see which channels and posts bring visitors to our products. Legal basis: our legitimate interest in measuring the effectiveness of our communication (Art. 6(1)(f) GDPR).
Contacting us
If you email us, we process your message and contact details to answer it. Emails are received through Cloudflare Email Routing and stored in our Google Workspace mailbox. Legal basis: Art. 6(1)(b) and (f) GDPR. We delete correspondence when it is no longer needed, subject to statutory retention periods.
Social media accounts and platform integrations
We run official accounts for our products on platforms such as TikTok, Instagram, Facebook, YouTube, LinkedIn and X. When you interact with these accounts, the respective platform is responsible for processing your data under its own privacy policy; for some processing (for example page statistics) we may be jointly responsible with the platform.
To publish and schedule our own posts and read the statistics of our own content, we connect our accounts to a scheduling tool that we operate ourselves on servers in the EU, through the platforms' official interfaces (APIs). Through these interfaces we receive access tokens for our own accounts, the content we publish, and aggregated statistics about our own posts and accounts (for example views, likes, shares, comment counts and follower numbers). We do not use these interfaces to collect, sell or profile data about other users. Public comments on our posts remain on the platform and are subject to its privacy policy.
Legal basis: our legitimate interest in presenting our products and understanding which content works (Art. 6(1)(f) GDPR). Access tokens and statistics are kept as long as the respective account is connected and deleted after disconnection, except aggregated statistics that we keep to evaluate our work.
Processors and transfers
We use Cloudflare, Inc. (hosting, content delivery, email routing, waitlist storage), Google Ireland Ltd. (email), PostHog Inc. (EU data region, link and website statistics) and Backblaze, Inc. (encrypted backups in the EU). Where data may be transferred outside the EU/EEA, this is based on the EU–US Data Privacy Framework or EU standard contractual clauses.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. To exercise them, email support@danubestudios.dev. You can also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at).
Data deletion requests
If you want us to delete any data we hold about you, including data received through a platform integration, email support@danubestudios.dev with the subject "Data deletion". We confirm and complete the request within 30 days.
Changes
We update this policy when our processing changes. The date above shows the latest version.