Skip to content

Privacy policy

As of September 2026

1. Controller

The controller for data processing on this website is Jan Sippl, Dorftstraße 1h, 01705 Freital, Deutschland.

Phone: +49 351 42788755 · Email: jan.sippl@webstudiojs.com

2. The essentials up front

This website sets no cookies and does not load fonts, scripts or trackers from third parties. All fonts are served from my own server. I process personal data only as described below. If you switch between light and dark design, your browser stores that choice locally (localStorage); it is not transmitted to me.

3. Hosting and server log files

The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit, technically necessary data is processed in server log files: IP address, date and time, requested URL, referrer, browser type and operating system. They serve secure and stable operation and the defence against attacks (Art. 6(1)(f) GDPR). Log files are deleted after 14 days at the latest.

A data processing agreement under Art. 28 GDPR exists with the hosting provider.

4. Contact (form and email)

If you use the contact form, I process your name, email address, optionally the project type and your message in order to answer your enquiry (Art. 6(1)(b) or (f) GDPR). The data is stored in my database and forwarded to me by email via an email service provider. It is deleted automatically after 12 months unless a contract is concluded or statutory retention duties apply. A hidden form field serves spam protection; it does not collect any additional data.

If you write to me directly by email, the same applies to the details you send.

5. Visitor statistics without cookies and live dashboard

To measure usage I count page views without cookies and without storing anything in your browser. When you visit a page, the requested path is transmitted. From it, my server derives a short irreversible value (hash) from IP address and browser identifier using a secret key that changes daily, in order to tell repeat views of the same day apart. The IP address itself is not stored; the short value is deleted after 24 hours, the bare view counts are kept (Art. 6(1)(f) GDPR: interest in improving the website and in demonstrating the live dashboard).

The live dashboard in the “Playground” shows aggregated figures only (total views, currently active visitors, views per day, most visited pages).

6. AI assistant (Playground chat)

The chat in the “Playground” is optional and only starts after you confirm the notice about it (Art. 6(1)(a) GDPR). Your messages are transmitted to the Anthropic API (Anthropic PBC, USA) to be answered; answers are generated by artificial intelligence and may contain mistakes. Please do not enter personal or confidential data.

My website does not store chat content. According to Anthropic, API inputs and outputs are deleted after 30 days at the latest and are not used for training. The transfer to the USA is based on standard contractual clauses (Art. 46 GDPR); a data processing agreement exists with Anthropic. More information: Anthropic privacy policy . You can withdraw your consent at any time by no longer using the chat or reloading the page.

7. Live cursor demo

When you open the live cursor demo, your browser establishes a WebSocket connection to my server. Your IP address is processed for technical reasons. For the duration of the connection you receive a random identifier; the mouse position within the demo area is relayed to other visitors of the demo in real time. Nothing is stored (Art. 6(1)(f) GDPR: providing the demo function you use).

8. Your rights

You have the following rights against me regarding your personal data:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on legitimate interests (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

Simply contact me at jan.sippl@webstudiojs.com .

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Saxon Data Protection and Transparency Commissioner, Postfach 11 01 32, 01330 Dresden, Germany ( datenschutz.sachsen.de ).

9. Changes

I adapt this policy when the website or the legal situation changes. The version published here applies.