Privacy Policy

Last updated: October 2026

The short version: no cookies, no ads, no third-party trackers. We process personal data when you visit this website (to deliver it and for anonymous visitor statistics on our own server) and when you join the waitlist.

1. Who is responsible

Henning Winter
aryo
Karlstraße 48
63263 Neu-Isenburg
Germany

Email: mail@aryostudio.de

2. Hosting

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, your browser automatically sends data such as your IP address, the date and time, the page you requested, the page you came from and your browser type. Cloudflare needs this to deliver the website and protect it against attacks, and processes it on our behalf under a data processing agreement. Transfers to the USA are based on the EU-US Data Privacy Framework.

Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in a secure and working website.

Fonts and images are loaded from this website itself, not from third parties.

3. Visitor statistics

We use Umami, an open-source analytics tool that we host on a server in Germany. No data goes to third parties. Umami does not set cookies and does not store your IP address. It records which pages are visited, the page you came from, your browser, operating system, device type, screen size, language and your approximate location (country, region, city). Visits are grouped by an anonymous identifier that is calculated from technical data and cannot be traced back to you.

Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in understanding how the website is used and improving it. The data stays on our server and is deleted as soon as we no longer need it for this purpose.

You can turn off the statistics for this browser at any time: Turn off statistics

4. Waitlist

If you join the waitlist, we store your email address together with the time you signed up and confirmed. We use it only to tell you when aryo::node launches and how to get one.

After signing up you get an email with a confirmation link (double opt-in). If you do not confirm, we delete your address after 30 days.

Your address travels from the form on this website through Cloudflare, Inc. (USA) to a server in Germany, where it is stored. Confirmation and launch emails are sent through an external email provider based in the USA. Both work on our behalf under a data processing agreement. Transfers to the USA are based on the EU-US Data Privacy Framework (Cloudflare) and the EU standard contractual clauses (email provider).

Legal basis: your consent, Art. 6 (1) (a) GDPR. You can withdraw it at any time with the link in every email or by writing to us. We then delete your address. We also delete it once we no longer need it for the launch.

5. Sharing a scene

If you send us a scene, we store the scene file, your pictures, the name, the short description, the name you want to be shown with, your email address and the time you sent it. We look at every scene before anything is published.

Everything travels from the form through Cloudflare, Inc. (USA) to a server in Germany, where it is stored until we decide. If we publish the scene, the scene file, the pictures, its name, description and your shown name become public on this website. They are stored with GitHub, Inc. (USA), where the code of this website lives, and served by Cloudflare. We email you once when it is live and then delete your email address. If we do not publish it, we delete the files and your email address.

Transfers to the USA are based on the EU-US Data Privacy Framework (Cloudflare, GitHub) and the EU standard contractual clauses (email provider).

Legal basis: your consent, Art. 6 (1) (a) GDPR, which you give with the checkbox in the form. You can withdraw it at any time by writing to us. We then take the scene off this website and delete your data.

6. Contacting us by email

If you write to us, we use your email address and your message only to answer you. Emails are stored with our email provider (see above).

Legal basis: Art. 6 (1) (b) GDPR if your message is about a purchase, otherwise Art. 6 (1) (f) GDPR, our legitimate interest in answering you.

7. Cookies

This website does not use cookies. If you turn off the statistics, your browser remembers that choice in its local storage.

8. Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or restricted (Art. 18), to receive it in a portable format (Art. 20) and to object to processing based on legitimate interest (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7 (3)). Just write to mail@aryostudio.de.

You can also complain to a data protection authority, for example the Hessian Commissioner for Data Protection and Freedom of Information (HBDI) in Wiesbaden.