What we collect.
Data controller
99ersstudio, LLC (Delaware, USA)
represented by Aaron Philipp Vogelsang
131 Continental Dr, Suite 305, Newark, DE 19713, USA
Email: admin@99ersstudio.com
99ersstudio, LLC is a US company and is not registered for VAT in the EU (no VAT ID).
Representative in the EU (Art. 27 GDPR)
99ersstudio, LLC is established outside the European Union. As our representative in the Union pursuant to Art. 27 GDPR we have appointed:
Prighter EU Rep GmbH
Schellinggasse 3/10, 1010 Vienna, Austria
Data subjects may exercise their data-protection rights (e.g. access or erasure) through our representative or contact them directly. Online contact: app.prighter.com/portal/15694257215
Hosting
This site is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) via Cloudflare Pages. On each request Cloudflare processes server log data (incl. IP address, timestamp, requested URL) to deliver the site securely and reliably — legal basis Art. 6 (1) (f) GDPR. Transfers to the USA are covered by the EU Standard Contractual Clauses (Cloudflare Data Processing Addendum).
This site does not set cookies. It loads no advertising, tracking, or analytics scripts — no third-party beacons or pixels of any kind. We run no web analytics, do not measure reach, and do not build profiles of visitors. (Cloudflare, as our host, processes server request logs to deliver the site — see Hosting above.)
If you email us, we will hold your message in our mailbox for as long as it is useful to the conversation. If you subscribe to the Studio Log newsletter, your email address is stored by our newsletter provider Buttondown (USA) until you unsubscribe. Legal basis: your consent (Art. 6 (1) (a) GDPR), which you may withdraw at any time by unsubscribing. Transfers to the USA are covered by the EU Standard Contractual Clauses.
Our apps have their own privacy notices. Offline-first apps process data on-device unless explicitly stated.
Project-brief form
When you submit a project brief (via the floating button or on the /contact page), we process the following personal data:
- Name + reply email — used only to reply. Stored in our mailbox (Stalwart on Hetzner VPS in Germany) for up to 24 months after the last contact, then deleted. Legal basis: Art. 6 (1) (b) GDPR (contract/pre-contract steps at your request).
- Brief content (audience, deadline, budget, constraint, free-text body) — used to scope a reply. Same storage + retention as above.
- IP address — held by our Cloudflare Worker for spam-rate-limiting for at most 24 hours (hourly + daily buckets that auto-expire), then deleted. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in preventing abuse). Not used to identify you.
- Local-storage draft— your in-progress brief is saved in your own browser's localStorage under the key
99ersstudio_intake_draft_v1so you can close + reopen without losing your work. It never leaves your device until you click Send. Cleared on successful submission. You can clear it manually in your browser dev tools at any time. No consent required (strictly necessary to provide the resumable form). - Partial form submission— When you enter your name and email address in step 1 of the form and click "Next", those details and your chosen service category are transmitted to our server (Cloudflare Worker) at that point — even if you do not complete the form. This allows us to follow up on an enquiry that was started but not finished. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in following up on initiated enquiries). You may object to this processing at any time. Retention: same as other form data (up to 24 months after last contact).
Sub-processors used during submission
- Cloudflare, Inc. (US) — hosts the form endpoint as a Cloudflare Worker. Cloudflare may briefly log connection metadata (IP, timestamp) for service integrity. EU Standard Contractual Clauses in place via their Data Processing Addendum.
- Resend (Resend, Inc., USA) — delivers the email from the Worker to our mailbox. Processes the from/to/reply-to/subject + body of the submission for delivery. Transfers to the USA are covered by the EU Standard Contractual Clauses.
Your rights
Under GDPR you have the right to access, rectify, delete, restrict, object to, and port your personal data, plus the right to withdraw consent at any time. You also have the right to lodge a complaint with a data-protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR). To exercise any of these rights, email privacy@99ersstudio.com — or simply use our Trust Center: app.prighter.com/portal/15694257215. We respond within 30 days.
Data controller: 99ersstudio, LLC (Aaron Philipp Vogelsang, Managing Member), contact information at /contact.
Automated decision-making / profiling
We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
Data protection officer
We have not appointed a data protection officer; the conditions requiring appointment (Art. 37 GDPR) do not apply to our organisation. For any data-protection enquiries, please contact us directly using the details in the imprint.
App-specific privacy notices
Our current Tier-1 Android apps each have their own policy page.
Questions about privacy or data handling — email privacy@99ersstudio.com.