Privacy

Website delivery and hosting

The website is provided through ChatGPT Sites by OpenAI. As we are based in the European Economic Area, our contracting party is OpenAI Ireland Ltd. The technical infrastructure uses Cloudflare. A visit involves processing connection data needed to deliver the website, such as your IP address, requested address, time and browser information. This supports delivery, troubleshooting and protection against misuse.

The legal basis is Article 6(1)(f) GDPR: our legitimate interest in a reliable, secure website. Recipients include the hosting and security providers involved. We do not operate an additional visitor database.

Cloudflare security cookie

When you visit this website, Cloudflare sets the __cf_bm security cookie to detect automated requests and prevent technical misuse. It contains encrypted bot-detection information and, according to Cloudflare, expires after 30 minutes of continuous inactivity. It is not used for our advertising or audience analytics.

We rely on section 25(2)(2) of the German TDDDG for storing and reading this cookie where required to deliver the website securely. The related processing of personal data is based on Article 6(1)(f) GDPR, our legitimate interest in protecting the website against harmful automated traffic.

• Cloudflare: information about __cf_bm

Processing outside the EEA

The infrastructure may also process data outside the European Economic Area, particularly in the United States. The Sites terms refer to OpenAI’s Data Processing Addendum for hosted data. It provides for EU Standard Contractual Clauses or an adequacy decision for relevant transfers. More information on these safeguards and Cloudflare’s processing is available below; you may also ask us for information.

• OpenAI Data Processing Addendum
• Cloudflare Privacy Policy

How long data is kept

Retention of technical operational and security data depends on what is needed to run the service, investigate faults or misuse, and meet legal obligations. Hosting providers process this data under their respective contractual and legal requirements. We cannot give one fixed number of days that applies to all technical data.

Features in your browser

The animation setting and move-in checklist last only while the relevant page is open. We use no cookies, localStorage or sessionStorage for these features. Reloading or moving to another page resets them.

Your elf’s name and personalised letter are assembled entirely in your browser. This feature does not send them to us or a server. You choose when to copy, print or download the text. A downloaded file remains on your device until you delete it.

No advertising or analytics features

We use no analytics or advertising trackers, load no external fonts, and offer no sign-in, contact forms or checkout here. This does not exclude the technical processing required for hosting. We do not make automated decisions with legal or similarly significant effects.

When you contact us

If you email or call us, we process the contact details and content you provide to deal with your enquiry. The legal basis is Article 6(1)(f) GDPR, or Article 6(1)(b) GDPR for contract-related enquiries. Providing the information is voluntary; without necessary contact details, we may be unable to reply.

Enquiries are deleted once they have been fully dealt with, unless they remain necessary for legal retention duties or the establishment, exercise or defence of legal claims. Communication providers used for this purpose may technically process the data.

Links to MakerWorld

MakerWorld is accessed only through ordinary links; its content is not embedded. The destination platform receives your request only when you open a link. The relevant operator’s privacy information then applies.

Your rights

Subject to the legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. To exercise your rights, contact the email address above.

You may complain to a data protection authority, particularly where you live or work or where you believe an infringement took place. The Schleswig-Holstein data protection authority / ULD is responsible for our location.

• Schleswig-Holstein data protection authority