Privacy Policy

1. Short and honest

This website uses no tracking, no advertising cookies, no analytics tools and no embedded third-party content. Fonts and images are served directly from this server. I only process personal data when it's technically necessary or when you contact me yourself.

2. Controller

Michael Wolf (Snowblue)
c/o Olympiawerk
Straßbergerstr. 3
80809 Munich, Germany

Phone: +49 163 7645556
Email: [email protected]

As a sole trader I'm not required to appoint a data protection officer. If you have questions, just write to me directly.

3. Hosting and server log files

The website is hosted by:

Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
Privacy: hetzner.com/legal/privacy-policy

Hetzner acts as my processor (Art. 28 GDPR); the servers are located in Germany.

When you open a page, the server automatically processes technical data: IP address, date and time, requested page, referrer, browser and operating system. This is needed to deliver the site and protect it against abuse (Art. 6(1)(f) GDPR). Log files are deleted after 14 days at the latest and are not combined with other data.

4. Local browser storage

If you switch between light and dark mode, your browser remembers this setting in local storage. This information never leaves your device and isn't sent to me. Legal basis: § 25(2) no. 2 TDDDG (strictly necessary for the service you requested).

5. Contact form, email, phone and messengers

If you contact me through the contact form, I process your details (name, email address, message and optional details such as company) to handle your request. Legal basis is Art. 6(1)(b) GDPR (enquiry about a possible engagement) or Art. 6(1)(f) GDPR (answering other enquiries).

To deliver the form message to my inbox I use the email service Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA), which receives the form content. A data processing agreement is in place; the transfer to the USA is safeguarded by the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Resend's privacy policy: resend.com/legal/privacy-policy.

Workshop registration: If you sign up for a workshop on the /training page, I process your first name, last name, email address, the payment method you chose and any voucher code to handle your participation (confirming your spot, payment, information about the date). The legal basis is Art. 6(1)(b) GDPR (contract). The registration is also sent to my inbox via Resend, and Resend sends an automatic confirmation to your email address. I keep the data as long as needed for the workshop and statutory retention periods (e.g. for invoices).

If you prefer, email me directly, call, or use Signal – then nothing goes through Resend. If you use Telegram, Telegram's privacy policy also applies.

I delete your enquiry once it's resolved and no statutory retention obligations (e.g. for quotes and invoices, 6 or 10 years) apply.

If you subscribe to the newsletter, I store your email address and – if provided – your name. Sign-up uses double opt-in: you receive an email with a confirmation link, and only then are you subscribed. The time of sign-up and confirmation is stored as proof.

Legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in every email or by sending me a short message. Your address is then deleted.

The newsletter software (Listmonk, open source) runs on my own server at Hetzner in Germany.

7. Microsoft live test (page /en/microsoft)

On the page /en/microsoft you can voluntarily start a live test. Only after you click "Start the live test" does your browser load small image files (favicons) directly from servers of Microsoft Corporation (USA) or its subsidiaries. In doing so, Microsoft receives your IP address and technical browser data – as with any web request. Making that visible is the point of the test.

I don't receive any data from this. Legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Microsoft may process the data in the USA; this is covered by the EU-US Data Privacy Framework (Art. 45 GDPR). Microsoft's privacy statement: privacy.microsoft.com.

Your approximate location for the globe view is estimated only from your browser's time zone; no location service is queried. The recorded replay on the same page doesn't connect to Microsoft.

8. Links to other websites

This site links to other websites (e.g. open-source projects). Data is only transferred when you click a link; the privacy policy of that site then applies.

9. Your rights

You have the right at any time to:

access your stored data (Art. 15 GDPR)
rectification (Art. 16 GDPR)
erasure (Art. 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
withdraw consent with effect for the future (Art. 7(3) GDPR)

A short email to [email protected] is enough.

You can also lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, lda.bayern.de.

10. Encryption and changes

The site is served exclusively over encrypted HTTPS. No automated decision-making or profiling takes place.

If the website changes, I'll update this policy. Last updated: October 2026.