Privacy Policy
Last updated: 14 May 2026
This site (hyprism.dev) is operated by Werner Mathias Bundschuh, an Individual Entrepreneur registered in Georgia (IE Reg. No. B25175473 — see Legal Notice). This page describes what personal data is processed, why, and your rights.
This policy is written to comply with both the EU General Data Protection Regulation (GDPR) and the Georgian Personal Data Protection Law — both frameworks are functionally equivalent for the data processed by this site.
What data is collected
Section titled “What data is collected”This site is deliberately minimal in its data collection. Here’s the complete list:
Server access logs (Cloudflare)
Section titled “Server access logs (Cloudflare)”When you visit hyprism.dev, Cloudflare (the hosting provider) records standard HTTP access logs:
- Your IP address (anonymized after 24h by Cloudflare’s default settings)
- Your browser User-Agent string
- The URL you visited
- HTTP referer (the page that linked you here)
- Timestamp
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — security, abuse-prevention, and operational reliability of the site.
Retention: Cloudflare retains anonymized logs for up to 7 days, then aggregates them.
Data processor: Cloudflare, Inc. (USA), under Standard Contractual Clauses + their Data Processing Agreement. See Cloudflare’s privacy policy.
Anonymous traffic analytics (Cloudflare Web Analytics)
Section titled “Anonymous traffic analytics (Cloudflare Web Analytics)”This site uses Cloudflare Web Analytics — a cookie-free, privacy-respecting analytics tool.
What it tracks:
- Page views (aggregated)
- Visit duration (aggregated)
- Referrer (which site linked to us)
- Browser + OS (aggregated)
- Country (no precise location)
What it does NOT track:
- No cookies set
- No fingerprinting
- No individual user tracking
- No data sold to third parties
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — understanding which docs are useful.
Data processor: Cloudflare, Inc.
Contact form submissions (Web3Forms)
Section titled “Contact form submissions (Web3Forms)”If you use the contact form, the data you submit (name, email, message) is sent to:
- Web3Forms — a forms service that delivers your message to my email inbox
- My Proton Mail inbox — where the message arrives for me to read and reply
What is collected:
- Your name (as provided)
- Your email address (as provided)
- Your message content (as provided)
- Submission timestamp
Legal basis: Consent (Art. 6(1)(a) GDPR) — implied by your choice to submit the form.
Retention: Your message stays in my email inbox until I delete it. I will keep it as long as needed to respond to your inquiry, typically up to 12 months.
Data processor: Web3Forms (Forms Hosting) and Proton AG (Email). Both have their own privacy policies linked at the end of this page.
What is NOT used on this site
Section titled “What is NOT used on this site”- ❌ Google Analytics
- ❌ Google Fonts CDN (fonts are self-hosted)
- ❌ Facebook Pixel / Meta tracking
- ❌ YouTube embeds (no third-party cookies)
- ❌ Chat widgets (Intercom, Hubspot, etc.)
- ❌ Marketing automation pixels
- ❌ Any cookies that require consent
Because no consent-requiring cookies are set, no cookie banner is needed under EU/Georgian law.
Your rights (under GDPR / Georgian PDPL)
Section titled “Your rights (under GDPR / Georgian PDPL)”You have the right to:
- Access — request a copy of any personal data we have about you
- Rectification — correct inaccurate data
- Erasure — request deletion of your data (“right to be forgotten”)
- Restriction — limit how your data is processed
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — for any processing based on consent (e.g., contact-form submissions)
- Lodge a complaint with your local data protection authority
To exercise any of these rights, email [email protected]. I will respond within 30 days.
Data protection supervisory authority for this site: Georgian Personal Data Protection Service. EU visitors may also lodge complaints with their national data protection authority.
Data processors used
Section titled “Data processors used”The following third parties process data on my behalf, each under their own Data Processing Agreement (DPA / AVV):
| Processor | Purpose | DPA / Policy |
|---|---|---|
| Cloudflare, Inc. | Site hosting, CDN, DNS, Web Analytics | Cloudflare Privacy Policy · DPA |
| Web3Forms | Contact form handling | Web3Forms Privacy |
| Proton AG | Email inbox for [email protected] | Proton Privacy Policy |
International data transfers
Section titled “International data transfers”Some processors (Cloudflare, Web3Forms) are based outside the EU/EEA and/or Georgia. Where data is transferred internationally, it is protected by:
- Standard Contractual Clauses (SCCs) where applicable
- Adequacy decisions where applicable
- The processor’s binding corporate rules
Proton AG is based in Switzerland, which has a Data Protection Adequacy decision under EU law.
Changes to this policy
Section titled “Changes to this policy”I will update this policy if site practices change. Material changes will be announced on the home page. The “Last updated” date above will be revised.
Contact
Section titled “Contact”For privacy questions or to exercise your rights:
Email: [email protected]