Privacy Policy

1. Data We Collect

We collect personal data only when you voluntarily submit our contact form. We do not use cookies, analytics scripts, tracking pixels, or any other form of passive data collection.

Contact form data:

• Name — to address you in our response
• Email address — to reply to your inquiry
• Message — the content of your inquiry
• Website (optional) — if you choose to share it
• IP address — collected automatically for rate-limiting and abuse prevention
• User agent — collected automatically for abuse prevention

2. Cookies & Tracking

We do not use tracking or analytics cookies, and we do not share data with advertising networks. Your browsing activity on this site is not tracked or recorded.

This website may set a strictly necessary functional cookie to remember your interface preferences (such as sidebar state). This cookie contains no personal data and is used solely to improve your experience on the site.

There are no public-facing user accounts or login systems.

3. Legal Basis for Processing (GDPR Art. 6)

We process your data based on:

• Consent — by submitting the contact form, you consent to us processing the data you provide
• Legitimate interest — IP address and user agent collection for abuse prevention and rate-limiting

4. How We Use Your Data

• To respond to your inquiry
• To prevent abuse and spam (IP-based rate limiting)

We do not use your data for marketing, profiling, automated decision-making, or any purpose beyond responding to your contact request.

5. Data Processors & Sharing

To operate this website, we use trusted third-party infrastructure providers for hosting, data storage, and email delivery. These providers process data only as necessary to perform their services and are bound by appropriate data protection obligations.

We do not sell, trade, or otherwise transfer your personal data to any other third parties.

6. Data Retention

Contact form submissions are retained for up to 12 months from the date of submission, after which they are deleted. You may request earlier deletion at any time (see Section 7).

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or UK, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to data portability — receive your data in a structured, machine-readable format
• Right to withdraw consent — withdraw your consent at any time
• Right to lodge a complaint — with your local data protection authority

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), server-side rate limiting, and input sanitization. However, no method of transmission over the internet is 100% secure.

9. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

11. Contact Us

For any privacy-related questions or to exercise your rights:

Email: privacy@sphericalcowlabs.xyz

Data Controller: Spherical Cow Labs