Privacy Notice

This website sets no cookies, uses no analytics or tracking, shows no advertising, has no forms or accounts, and loads nothing from other websites. Like every website, it cannot be delivered without your device's IP address reaching the server that hosts it.

Controller

Zain Orwa

Place of residence

Krems an der Donau, Niederösterreich, Austria

Contact

erdflow@proton.me

The website is served by GitHub Pages, a service of GitHub, Inc. in the United States. ERDFlow does not run its own web server. When you open a page, your browser requests it from GitHub's servers, so GitHub receives your IP address and the technical information your browser sends with every request, such as the address of the page, the time of the request and the type of browser. GitHub uses this to deliver the page and to protect its service, and states that GitHub Pages logs visitors' IP addresses for security purposes. ERDFlow does not receive these logs and has no access to them.

Legal basis

Art. 6(1)(f) GDPR: the legitimate interest in making the website available and keeping it secure. The website cannot be delivered without this information.

Recipient

GitHub, Inc., which describes its processing in its privacy statement.

Retention

GitHub decides how long it keeps these logs and does not publish a retention period for GitHub Pages. ERDFlow cannot access or delete them.

The domain erdflow.app is registered with Vercel Inc. in the United States, which also operates its DNS, the directory service that tells browsers where to find the website. Vercel does not host the website and does not receive the pages you request. Looking up the domain is normally done for you by your internet provider's or another DNS resolver. Vercel describes its processing in its privacy notice. The legal basis is Art. 6(1)(f) GDPR, as for hosting.

GitHub and Vercel are based in the United States, and Proton (see below) in Switzerland. GitHub and Vercel state that they are certified under the EU–U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR); GitHub also refers to the European Commission's Standard Contractual Clauses. Their certification can be checked on the Data Privacy Framework List. For Switzerland, the European Commission has also adopted an adequacy decision.

If you write to erdflow@proton.me, your email address, the content of your message and any other personal information you choose to include are processed in order to read and answer it. The address is hosted by Proton Mail, a service of Proton AG in Geneva, Switzerland, which receives and stores the messages and describes its processing in its privacy policy.

Legal basis

Art. 6(1)(f) GDPR: the legitimate interest in answering enquiries about ERDFlow.

Retention

Routine enquiries are deleted within 90 days after they are resolved. Messages are kept longer only where the law requires it or where they are needed for an ongoing matter.

When you use the light/dark switch, your choice (“light” or “dark”) is saved in your browser's local storage under the name erdflow-theme, so the website keeps your preferred appearance. It is saved only when you use the switch, stays on your device, is never sent to the server or to anyone else, and contains nothing that identifies you. Because it is stored only to provide the switch you used, it needs no consent (§ 165 Abs. 3 TKG 2021). You can remove it at any time by clearing this website's data in your browser.

The website's typeface is served from erdflow.app itself. Your browser does not contact Google or any other font provider when you visit.

The website sets no cookies and uses no analytics, tracking or advertising services. If that changes, this notice will be updated first.

Some links lead to ERDFlow's pages on GitHub, for example to report a problem or read the source code. Nothing is loaded from GitHub until you follow such a link. GitHub's own handling of data is described in its privacy statement.

You have the right to access the personal data held about you, and to have it corrected, erased or restricted (Art. 15–18 GDPR), to receive it in a portable format (Art. 20 GDPR), and to object to processing based on legitimate interests (Art. 21 GDPR). To exercise these rights, write to erdflow@proton.me.

You also have the right to complain to a data protection supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.

You do not have to provide any personal data, but the website cannot be delivered without your IP address being processed by the host. No automated decision-making or profiling takes place.

Last updated

11 October 2026