Privacy Policy

Who is responsible

The controller (Verantwortlicher im Sinne der DSGVO/GDPR) for this website is Marina Kletzenbauer, Kugelbergstraße 2a, 8112 Gratwein-Straßengel, Austria. Full contact and business details are in the Impressum.

Privacy questions: hello@moray.studio

Hosting and server logs

This site is hosted on Cloudflare Pages (Cloudflare, Inc.). When you open a page, your browser sends technical data that the host needs to deliver the site and keep it secure: IP address, date and time of the request, the page requested, referrer, and your browser and operating system. Legal basis is Art 6(1)(f) GDPR (our legitimate interest in a secure, reliable website). These logs are kept only short term for delivery, security and troubleshooting. Cloudflare acts as our processor under a data processing agreement and may process data on servers inside and outside the EU under appropriate safeguards (EU standard contractual clauses).

Analytics

We use Cloudflare Web Analytics to understand aggregate page usage and website performance. It can show information such as page views, visited URLs, referrers, countries, device and browser categories, and web performance metrics. Cloudflare Web Analytics does not use cookies or localStorage and does not fingerprint individual visitors for analytics. We do not use it to build personal profiles or for advertising. Legal basis is Art 6(1)(f) GDPR: our legitimate interest in understanding and improving the usefulness, reliability and speed of this website.

Cookies

Cloudflare Web Analytics does not set analytics cookies. We do not use advertising cookies or tracking pixels: there is no Google Analytics, Meta, TikTok or advertising pixel, and no remarketing script. Cloudflare may set a strictly necessary security cookie to protect the site from abuse.

Contact and the brand brief

If you email us or use the brand brief, we process the details you choose to send — name, email address, brand or project name, message and the time of consent — only to review and answer your request. The form is processed by a first-party Cloudflare Pages Function and stored in a Cloudflare D1 database linked to this website. We do not store your IP address in the form database and do not add brand enquiries to a marketing list.

Legal basis is Art 6(1)(b) GDPR for steps toward a possible collaboration, otherwise Art 6(1)(f) GDPR (our legitimate interest in answering enquiries). Form submissions are deleted no later than 12 months after submission unless a longer retention period is needed for an active business relationship or a legal obligation. Cloudflare acts as our processor under the safeguards described in “Hosting and server logs”. The “Email us directly” option instead opens your own email app and sends the message through your email provider.

Embedded videos

Where we show a YouTube video, the preview image is served from our own site, so YouTube loads nothing until you actively click play. Only then does the player load, in YouTube's privacy-enhanced mode (youtube-nocookie.com). From that moment YouTube (Google) may process your data under its own privacy policy, so clicking play is your choice.

External links and platforms

Links to YouTube, TikTok, Instagram, Amazon and other services are normal outbound links. They are not auto-embedded, so those platforms receive no data from us until you click a link and leave this site. Once you are there, that platform's own privacy policy applies.

Affiliate links

Some outbound links, such as our Amazon Storefront, are affiliate links. See ourAffiliate Disclosure for details. Clicking one can let the destination set its own cookies under its own policy.