Privacy Policy

1. Controller

Temple of Desire LLC, 30 N Gould St, Ste N, Sheridan, Wyoming 82801, USA · Represented by Leif Daniel Schmidt, Managing Member · [email protected]

2. In short

This site sets no cookies, uses no advertising tracking and sells no data. Once enabled, reach measurement runs via self-hosted, cookieless analytics (Umami) that builds no personal profiles and does not permanently store IP addresses.

3. Hosting and server logs

This site runs on servers of Hetzner Online GmbH in Germany. On access the server automatically processes technical data (IP, timestamp, page, user agent, referrer) as needed for delivery, stability and security. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Logs are deleted or anonymised after at most 14 days.

4. CDN / DNS (Cloudflare)

We use Cloudflare, Inc. (USA) for DNS and — where enabled — as a security and delivery proxy. Legal basis: Art. 6(1)(f) GDPR. A data processing agreement including EU standard contractual clauses is in place.

5. Analytics (Umami, self-hosted, cookieless)

Where enabled, we run Umami on our own infrastructure. It sets no cookies, stores no full IP addresses and builds no user profiles; only aggregate metrics are recorded. Legal basis: Art. 6(1)(f) GDPR.

6. Newsletter (single opt-in)

On newsletter sign-up we process your e-mail address for sending purposes. The sign-up is logged with a timestamp (and technically the IP address) as proof; we do not send a separate confirmation e-mail (double opt-in). You can unsubscribe at any time via the link in every e-mail; data is then removed from the list. Managed via self-hosted Listmonk; sent via Google Workspace. Legal basis: consent (Art. 6(1)(a) GDPR).

7. Contact by e-mail

When you contact us we process the data provided to handle the request (Art. 6(1)(b)/(f) GDPR). E-mail service: Google Workspace (see 6).

7a. Comments

For comments we use a self-hosted comment function (Remark42) on our servers. We process your chosen display name, optionally your e-mail address, the comment content and technically necessary data. Comments are moderated. Legal basis: Art. 6(1)(b)/(f) GDPR. You can request deletion of your comments at any time by e-mail.

7b. Customer account

When you register we process your e-mail address, password (stored encrypted), chosen preferences and sign-in timestamps to provide the account (Art. 6(1)(b) GDPR). For account security we log sign-in attempts and active sessions and set technically necessary cookies (session, CSRF protection). You can delete your account at any time in the account settings; your data is then removed or anonymised unless statutory retention obligations apply. An existing newsletter suppression list is retained to prevent abuse.

8. Third-country transfers

The controller is based in the USA and we use the US providers named in 4 and 6. Transfers to the USA rely on EU standard contractual clauses and/or the EU-US Data Privacy Framework where applicable.

9. Your rights

You have the rights of access (Art. 15), rectification (16), erasure (17), restriction (18), portability (20) and objection (21 GDPR). You may withdraw consent at any time with future effect and lodge a complaint with a supervisory authority.

10. No automated decision-making

No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.

11. Changes

We adapt this policy when services or the legal situation change. The version published here applies.

This is a convenience translation — the German version prevails.