Website privacy policy

Controller

Scope

This policy applies to the information pages on zenithstack.dev. The TheoriePass app has its own privacy policy. This website has no user accounts, contact forms or newsletter forms, and uses no analytics or marketing services. Fonts and images are served with the website; external videos and social media content are not embedded.

Hosting and technical access data

The website is delivered as a static site through Cloudflare. The technical service provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you visit, Cloudflare processes data including your IP address, request time, requested URL, referrer where available, browser and device information, and security-related events. This enables content delivery, troubleshooting and protection against abuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. Access data is processed only for as long as necessary for delivery, security and troubleshooting; specific security incidents may require longer retention for investigation. We do not create our own visitor profiles or maintain permanent visitor statistics linked to individuals.

Language selection and local browser storage

On your first visit, the website may choose German, Persian or English using the preferred languages supplied by your browser. Persian is selected if it appears in those preferences, otherwise German if present, and English otherwise. This is evaluated locally in your browser. The website does not read installed keyboards or keyboard input.

When you select a language yourself, only that choice is stored in your browser’s local storage (localStorage), so your preference can be used on a later visit. No visitor identifier is assigned and the choice is not sent to an analytics service. It remains stored until you clear the website’s browser data or change your choice. This storage serves the language function you expressly request (section 25(2), no. 2 TDDDG). To the extent that personal data is processed, the basis is Article 6(1)(f) GDPR and our interest in providing your chosen display language.

Contact by email or phone

An email link opens your own email application. We process the contact details and message content you provide only when you send a message or call us, in order to respond to your enquiry. The basis is Article 6(1)(b) GDPR for contractual or pre-contractual enquiries, or otherwise Article 6(1)(f) GDPR and our interest in answering enquiries.

Recipients are the email and telecommunications providers used for communication. Contact enquiries are deleted once resolved, unless statutory retention duties or legitimate needs to establish or defend claims require further retention.

Recipients and international transfers

Cloudflare and any communications providers we use may process data outside the European Economic Area. Where required, transfers are protected by an applicable adequacy decision or appropriate safeguards, in particular EU Standard Contractual Clauses. Information on Cloudflare’s safeguards is available in its Data Processing Addendum. Contact us for further information about the recipients and safeguards relevant to your enquiry.

Links to other services

Opening a link to the App Store or another external website establishes a connection to that provider. Its privacy information applies to processing there. Store references on this website are ordinary links; no store widget loads unless you follow a link.

Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on a legitimate interest, you may object for reasons relating to your particular situation. You may withdraw consent at any time with effect for the future; this does not affect the lawfulness of processing before withdrawal.

You may lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or the alleged infringement. You may also contact the State Commissioner for Data Protection of Lower Saxony at Prinzenstraße 5, 30159 Hannover, Germany, or poststelle@lfd.niedersachsen.de. To exercise your rights, simply contact us. We do not use automated decision-making with legal or similarly significant effects, or advertising profiling.