Privacy Policy
Last updated: 2025-09-11
1. Controller
Marius Morgenstern
Malterstr. 9, 01159 Dresden, Germany
Email: business.tryonai@gmail.com
2. General information on data processing
This is a static website without its own backend. We process personal data only as necessary to provide the site or after you have given consent (Art. 6(1)(a) GDPR). Non-essential technologies (analytics, advertising, external embeds) are only activated after consent.
2.1 Consent management (CMP)
We use a consent management platform (CMP) to load non-essential technologies only after you consent. You can change your selection at any time via the “Privacy settings” button or the page /privacy/.
- Legal basis: Art. 6(1)(a) GDPR (consent)
- Granularity: Analytics, External embeds, Ads, Personalized ads
- Retention: Consents are stored locally and renewed after 6 months at the latest (re-consent).
3. Hosting & delivery
The website is hosted and delivered by Vercel. Server-side logs (e.g., IP address, timestamp, user agent) may be processed to provide the site and ensure security.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and efficient delivery)
- Recipient & role: Vercel Inc. — processor. A data processing agreement (DPA) is in place. See https://vercel.com/legal/dpa
- Retention: according to the host’s policy for the minimum necessary duration
4. Web analytics (Vercel Analytics)
We use Vercel Analytics. The script is only loaded if you allow Analytics. Vercel uses no cookies and collects aggregated usage data (page views, referrers, coarse browser/device data). IP addresses are shortened/hashed.
- Service: Vercel Inc., Avenue Huart Hamoir 71, 1030 Brussels, Belgium, privacy@vercel.com
- Role: processor (on our behalf)
- Legal basis: Art. 6(1)(a) GDPR (consent)
- Transfer: EU/EEA/USA (according to the provider). A DPA with Vercel is in place.
- Opt-out/withdrawal: at any time via Privacy settings or /privacy
5. Advertising (Google AdSense)
Ads are loaded only if you allow Ads. Personalization is used only if you additionally allow Personalized ads. Google will use among others Usage Data, Geo Data, Interests Profiles. Without personalization, non-personalized ads (NPA) are requested.
- Service: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- Role: independent controller
- Legal basis: Art. 6(1)(a) GDPR (consent); where storage/access to end-device information is involved: § 25(1) TTDSG
- Technology: IAB TCF 2.2 + Google Consent Mode v2 (ad_storage, ad_user_data, ad_personalization)
- Processing: use of usage data, coarse geo data, and interest profiles for profiling to deliver personalized ads; no solely automated decisions by us producing legal effects.
- Third-country transfer: possible to the USA; safeguards: EU-US Data Privacy Framework and/or SCCs (per Google).
- Controls: withdraw consent anytime via Privacy settings; see also Google’s Ads & Privacy and Ad Settings.
6. External embeds
6.1 YouTube (nocookie)
Videos load only after you consent to External embeds. We use the domain youtube-nocookie.com, which transmits data to YouTube only when playing the video.
- Service: Google Ireland Limited (YouTube)
- Role: independent controller
- Privacy policy: YouTube/Google: Privacy Policy
- Legal basis: Art. 6(1)(a) GDPR (consent)
- Third-country transfer: possible to the USA; see Google section
6.2 Giscus (GitHub Discussions)
Comments are embedded via Giscus and load only after you consent to External embeds. When interacting, data may be transmitted to GitHub.
- Service: GitHub, Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA
- Role: independent controller
- Privacy policy: Github: Privacy
- Legal basis: Art. 6(1)(a) GDPR (consent)
- Third-country transfer: to the USA; appropriate safeguards (DPF/SCC) according to the provider
7. Cookies and similar technologies
Essential technologies (required for operation) are always active (legal basis: Art. 6(1)(f) GDPR; for end-device storage/access: § 25(2) TTDSG). Non-essential technologies (analytics, ads, external embeds) are activated only with your consent. You can change your choices at any time.
8. Your rights
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR, where applicable)
- Withdrawal of consent (Art. 7(3) GDPR)
- Complaint with a supervisory authority (Art. 77 GDPR), e.g., the competent state authority in Saxony, or any other competent authority in the EU/EEA.
To exercise your rights, contact: business.tryonai@gmail.com. We may request information to verify your identity.
9. Manage your choices
Current status & settings
- Analytics –
- Ads –
- Personalized ads –
- External embeds (YouTube, Giscus) –