Privacy policy
This is a translation for convenience. The German Datenschutzerklärung is legally binding.
1. At a glance
- This website sets no cookies and uses no tracking or analytics tools.
- Fonts, scripts and graphics are all hosted on this website's own server. No third-party content is loaded (no Google Fonts, no embedded videos, no social media buttons).
- Personal data is only processed when you visit the site (technically necessary server data at my host) or when you send me an email.
- The arcade, visitor DNA and gene lab only store something in your browser when you start them yourself. This data never leaves your device (section 5).
2. Controller
Marvin Glaser (Codonwerk)Damm 69a, 25421 Pinneberg, Germany
Email: info@codonwerk.de
3. Hosting by Cloudflare
This website is delivered by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the site, Cloudflare processes technically necessary data so that the site can be displayed and protected against attacks, in particular your IP address, the date and time of access, the requested address and information about your browser and operating system. I do not analyse this data myself.
The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest lies in providing the website securely, quickly and reliably. I have a data processing agreement with Cloudflare.
Data may be transferred to the USA in the process. Cloudflare is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR) and has additionally concluded the European Commission's Standard Contractual Clauses (Art. 46 GDPR). More information: Cloudflare privacy policy.
4. Contact by email
If you send me an email, I process your address and the content of your message in order to reply. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract, otherwise Art. 6 (1) (f) GDPR (my interest in answering enquiries). I delete messages once they have been dealt with, unless statutory retention obligations apply.
Emails to info@codonwerk.de are automatically forwarded to my mailbox by Cloudflare (see section 3). Cloudflare processes sender, recipient and content only for forwarding and does not store the message permanently.
My mailbox is hosted by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland. Switzerland is covered by an adequacy decision of the European Commission.
5. Features in your browser
The 3D helix runs entirely in your browser. If you allow "Enable tilt" on your phone, your device's orientation data is only used there to move the camera. It never leaves your device and is not stored.
Storage in your browser (local storage)
Simply visiting the site stores nothing on your device. Only when you use one of these features yourself does the site create an entry called codonwerk in your browser's local storage:
- Arcade: when you start a game – your best scores, your collected energy and how much energy you have already collected per game today (for the daily limit), and for Gene Code your attempts at the code of the day.
- Visitor DNA: when you tap "Create my DNA" – 16 randomly generated bases and the creation date. They define your robot specimen and your base pair on the helix. The DNA is pure chance and has nothing to do with you as a person.
- Gene lab: when you keep an idea – your favourites.
This data stays on your device. It is not transmitted to me, to Cloudflare or to third parties, and I cannot see it. The image of your specimen is also generated only in your browser; only you can share it.
The legal basis for storing it is Section 25 (2) No. 2 TDDDG, because storage is strictly necessary to provide the feature you explicitly requested. Where personal data is involved, Art. 6 (1) (b) GDPR applies.
Deletion: On the home page under "Your DNA", "Delete my data" removes everything at once. Alternatively, clear the site data in your browser settings. There is no fixed retention period; the data remains until you delete it.
6. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21) at any time. An informal email to the address above is sufficient.
7. Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany, datenschutzzentrum.de.