Privacy

Secret Unicorn Agency Eichstetter Str. 11 79106 Freiburg Contact: hello@secret-unicorn.agency

We operate the website ourselves on a server managed with Plesk. Cloudflare sits in front of it for delivery and protection against attacks. Technically required connection data is processed, including IP address, time, requested URL, referrer, user agent and status code. The purposes are secure delivery, error analysis and abuse prevention.

Secure and reliable delivery is based on Article 6(1)(f) GDPR. Our legitimate interests are reliable operation and protection against attacks. Website logs on our server rotate daily; 6 archives and the current file are kept per log. In regular operation, this represents approximately 7 days. This period does not describe Cloudflare’s own security logs.

The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Connection data may also be processed outside the European Economic Area, particularly in the United States. Cloudflare’s data processing terms include EU Standard Contractual Clauses for relevant third-country transfers. The provider describes purpose-based retention criteria for its own network and security data.

• Cloudflare privacy policy
• Cloudflare data processing terms

The website only opens your local email app or copies the draft to the clipboard after an explicit action. The message is transmitted to us through your email provider only when you send it. The website stores no draft in cookies or local storage. We process incoming messages to respond to your enquiry: under Article 6(1)(b) GDPR for steps towards a contract, or Article 6(1)(f) GDPR for our legitimate interest in other correspondence. Messages are deleted once the enquiry is resolved, unless statutory retention duties or the necessary handling of legal claims require otherwise.

By default, appearance follows your system setting without storing it. If you explicitly select Light or Dark, your browser remembers that choice in local storage under “su-theme”. The choice is not sent to us and contains no contact information. You can remove it at any time by selecting “Automatic” or clearing this website’s data in your browser.

Where the legal requirements are met, data subjects may request access, correction, deletion, restriction, portability or object to processing and may complain to a data protection authority.