Privacy policy

The controller under the GDPR is Eduard Markgraf, trading as Glacius Labs, Zeisigweg 9, 76149 Karlsruhe, Germany. For any question about your data, write to contact@glacius-labs.com or call +49 157 35405618.

The site runs on AWS Amplify and is delivered through Amazon CloudFront, both services of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. To deliver a page, AWS processes your IP address, the page you request, the time, and what your browser sends with every request: its type and version, your operating system and the page that linked here. AWS records these requests in access logs, which we open only to investigate a fault or an attack.

Our server code writes a log entry for each request to Amazon CloudWatch in Frankfurt. An entry contains your IP address only when the contact form refuses a submission, for example from a bot. We delete these logs after 30 days.

The legal basis is Art. 6(1)(f) GDPR: we have a legitimate interest in delivering the site reliably and keeping it secure.

The site sets no cookies and stores nothing on your device. It uses no analytics, no advertising and no social media plugins. Fonts and icons come from this domain, so your browser connects to no other server. The links to GitHub and X are plain links: those services learn of your visit only when you follow one.

When you send a brief, we process your first and last name, your email address, your message, your IP address and the time of sending.

We use your name, email address and message to reply and to prepare a possible engagement. The legal basis is Art. 6(1)(b) GDPR, steps taken at your request before entering into a contract; for other questions, Art. 6(1)(f) GDPR, our legitimate interest in answering you. Without these details we cannot reply.

We use your IP address and the time to accept one brief per minute from the same address and to fend off abuse. The legal basis is Art. 6(1)(f) GDPR: we have a legitimate interest in keeping the form free of spam. We also check the domain of your email address against a public list of disposable email providers. The check runs on our server and sends nothing elsewhere.

The brief is stored in Amazon DynamoDB in the AWS region Frankfurt (eu-central-1). Amazon Simple Email Service, also in Frankfurt, then sends it without your IP address to our inbox at Gmail.

Mail to contact@glacius-labs.com arrives at Amazon Simple Email Service in Frankfurt. It checks the mail for viruses and spam, keeps a copy in Amazon S3 in Frankfurt and forwards the mail to our inbox at Gmail.

We use your email address and what you write to answer you. The legal basis is Art. 6(1)(b) GDPR where your mail concerns an engagement, otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering you.

AWS processes data on our behalf under a data processing agreement (Art. 28 GDPR). Our inbox is a Gmail account, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google can process data in the United States; Google LLC participates in the EU-US Data Privacy Framework. We pass your data to no one else, and we never sell it or use it for advertising.

CloudFront serves pages from the location nearest to you, which can be outside the European Union. For such transfers, the AWS data processing agreement includes the EU standard contractual clauses, and Amazon Web Services, Inc. participates in the EU-US Data Privacy Framework.

• Briefs are deleted automatically twelve months after they arrive. We delete their copies in our inbox, and the mail you send us, on the same schedule.
• The copy of your mail in Amazon S3 is deleted after 30 days.
• The database keeps backups for 35 days, so a deleted brief is gone for good 35 days later.
• Server logs are deleted after 30 days.
• When a brief leads to an engagement, we keep the correspondence for as long as German commercial and tax law require, up to ten years.

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18) and to receive it in a portable format (Art. 20). Where we rely on a legitimate interest, you can object to the processing on grounds relating to your particular situation (Art. 21).

Write to contact@glacius-labs.com. We answer within one month.

We make no automated decisions about you and build no profiles.

You can complain to a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany, baden-wuerttemberg.datenschutz.de.

We update this policy when the way the site processes data changes. Last updated on 31 October 2026.