Privacy policy

Felix Faust is responsible for the processing described on this page. The postal address and other legal details are available in the imprint.

For privacy questions, contact contact@turtledev.net.

This website is delivered through Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes the technical access data needed to deliver and protect the site. This includes the IP address, request time, requested URL, browser and device information, status codes, and diagnostic data.

This processing keeps the website available, helps diagnose errors, and protects it against abuse. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in operating the site securely.

Vercel is based in the United States and may process data outside the European Economic Area. Vercel publishes information about international transfers and its subprocessors in its privacy documentation.

When you send a project enquiry, we process the contact and project details you provide so we can review the request, reply, and prepare a possible contract. The legal basis is Article 6(1)(b) GDPR.

We use Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA, to deliver the internal enquiry and your confirmation email. Vercel processes the request as part of hosting and protecting the website. Article 6(1)(f) GDPR also applies to this technical processing.

If the enquiry does not lead to a contract, we delete it no later than six months after the correspondence ends. Legal retention duties or an active contract may require longer storage.

Vercel Web Analytics, Vercel Speed Insights, and Google Analytics 4 load only after you actively agree in the consent bar. We use these services to analyse page views, website performance, traffic sources, technical device characteristics, and approved interactions in aggregate. The legal basis is your consent under Article 6(1)(a) GDPR and, where information is stored on or read from your device, Section 25(1) TDDDG.

Vercel Web Analytics processes the time, requested path, the campaign parameters utm_source, utm_medium and utm_campaign, referrer, approximate location, browser, operating system, and device type. The service does not use analytics cookies. Vercel creates a daily rotating hash from incoming request data. It cannot use this hash to recognise you across different days or websites, and it discards the session identifier after 24 hours. We receive aggregate statistics.

For known, sanitised page paths, Vercel Speed Insights records Web Vitals and their technical attribution. This includes the route, URL, network speed, browser, device type, operating system, country, measured Web Vital, technical attribution, SDK version, and server-received event time. Vercel states that these data points are stored anonymously, are not associated with a person or IP address, and are not connected into a browsing session across pages.

Google Analytics 4 processes sanitised page views, the source up to the referrer domain, approved campaign parameters, language, page group, and technically approved interactions. Google uses the IP address during collection to derive coarse location data and discards it before storage. Google Analytics may set cookies. Advertising features, Google Signals, and user IDs are disabled. Names, contact details, free text, and identifiers from project enquiries are not sent.

Your consent applies to all three analytics services. Your choice is stored in a first-party cookie for six months and can be changed at any time through the “Analytics settings” link in the footer. When you withdraw consent, we block new analytics events, delete accessible Google Analytics cookies, and reload the page. The services do not load after the reload. Withdrawal applies to future processing.

We keep personal data only for as long as it is needed for the relevant purpose or required by law. The period for project enquiries is described above. The analytics choice is stored for six months.

Google Analytics 4 deletes user-level and event-level data after 14 months. Aggregate standard reports may remain available for longer. Vercel discards the daily session identifier used for Web Analytics after 24 hours. Aggregate Web Analytics and Speed Insights reports remain available for the relevant reporting window of our Vercel plan.

Recipients are Vercel Inc. for hosting, Vercel Web Analytics, and Vercel Speed Insights, Plus Five Five, Inc. for email delivery, and, after your consent, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and affiliated Google companies. Vercel, Resend, and Google may process data in the United States. Under their published terms, the providers rely on the EU-U.S. Data Privacy Framework and the European Commission’s Standard Contractual Clauses where applicable.

Subject to the applicable requirements, you may request access, correction, deletion, restriction of processing, and data portability. You may object to processing based on legitimate interests and withdraw consent at any time for future processing.

You may also lodge a complaint with a data protection supervisory authority, in particular in the country or region where you live, work, or believe an infringement occurred.