Privacy Policy

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

“OnPoy Studios” is an unregistered business name of Onur Sitar.

This policy covers this website only. It describes what data is processed when you visit these pages and when you use the contact form.

Our iOS apps are governed by separate, independent privacy policies. You can find them here: OnPoy Cars, Trend or Flop and Chaos – Forbidden Words.

This website is hosted on GitHub Pages, a service provided by GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA.

When you open a page, your browser transmits technically necessary data to GitHub's servers, where it is processed in server log files. This includes in particular:

• your IP address
• the date and time of the request
• the page or file requested
• the volume of data transferred and the HTTP status code
• browser type, browser version and operating system
• where applicable, the previously visited page (referrer)

This processing is technically necessary in order to deliver the website and to keep its operation secure. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing the website reliably and securely.

We ourselves have no access to these log files and do not analyse them. For further information, please see GitHub's privacy statement: GitHub Privacy Statement.

This website embeds no external fonts, scripts or tracking services. The fonts used are self-hosted: they are loaded from the same server as the website itself. No connection is made to Google Fonts or any other font provider, and your IP address is not passed on to third parties in the process.

Opening this page therefore establishes no connections to third-party servers, apart from the hosting server that delivers the page itself.

A contact form is available on the home page. If you use it, we process the data you enter:

• subject of your enquiry (selection)
• name
• email address
• message text

We use this data solely to handle and respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to entering into or performing a contract, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding to enquiries.

Technical delivery is handled by the service Web3Forms (Web3Creative). The provider processes the submitted form data on our behalf as a processor and forwards it to us by email. The provider operates its infrastructure using, among others, Amazon Web Services, Cloudflare and Hetzner; processing may therefore also take place outside the European Union. Further information is available at web3forms.com/privacy.

Providing your data is voluntary. You may write to us directly by email instead at any time.

If you write to us by email, we process your email address and the information contained in your message in order to respond to your enquiry. The legal basis is Art. 6(1)(b) or (f) GDPR.

Our mailbox is operated via Google Mail (Google Ireland Limited). Processing by that provider may therefore occur.

This website sets no cookies. There is no web analytics, no profiling, no audience measurement and no advertising.

For this reason, the site also requires no consent banner.

Where data is transferred to service providers established or operating infrastructure outside the European Economic Area – specifically GitHub (USA) for hosting and Web3Forms when the contact form is used – such transfers take place on the basis of the applicable safeguards under Chapter V GDPR, in particular standard contractual clauses or an adequacy decision where one exists.

An absolute equivalence with the level of data protection within the EU cannot be guaranteed in every case.

We retain personal data only for as long as is necessary for the purposes described above or for as long as statutory retention obligations apply.

Enquiries received via the contact form or by email are deleted once the matter has been dealt with conclusively and no statutory retention periods prevent deletion.

Subject to the statutory requirements, you have the following rights:

• access to the data processed (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)

An informal message to onpoy.studios@gmail.com is sufficient to exercise these rights.

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement.

The authority responsible for our place of business is the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hanover, Germany.

This website contains links to external sites, for example to the Apple App Store or to the privacy notices of the service providers we use.

We have no influence over their content or their data processing. Responsibility for the processing of your data on those sites lies solely with the respective providers.

We update this privacy policy when the website, the services used, or the applicable legal requirements change.

The version published on this page applies in each case; the date at the top of the page indicates the current status.

If you have questions about this privacy policy or about the processing of your personal data, you can reach us at: