This page describes how we process personal data when you use this website — a static site for the Codex Theme Studio open-source project (theme tooling for OpenAI Codex). It is in English; the legal framework is the EU General Data Protection Regulation (GDPR) and, where applicable, German law including the BDSG. It is general information, not personal legal advice.
## CONTROLLER
The controller responsible for this site under GDPR is:
Dogan Teke
50737 Cologne, Germany
General / privacy contact:info@doganteke.ai
For requests under Art. 15–22 GDPR, use an inbox we can reply to and describe what you need (e.g. access or erasure) so we can find the right data and verify the request.
> privacy_config::overview
├─ on_site_marketing_tracking: false
├─ hosting: "Cloudflare Pages (edge delivery)"
├─ fonts: "@nuxt/fonts (bundled, same-origin — no Google requests from visitors)"
└─ legal_basis_primary: "Art. 6(1)(f) GDPR (website operation)"
## COOKIES_AND_SIMILAR_TECHNOLOGIES
We do not set optional marketing or analytics cookies on this site (see the checklist below). Delivery over HTTPS and normal browsing still involve essential technical processing (e.g. edge logs, TLS, caching) as described under hosting. There is no login or account area on this static site.
<not_used_here>
- [ ] marketing / advertising cookies
- [ ] Google Analytics / Meta Pixel
- [ ] remarketing tags
<your_rights>
- [✓] Arts. 15–22 GDPR rights (see below)
- [✓] Art. 77 GDPR — complaint to a supervisory authority
- [✓] contact: info@doganteke.ai
## PROCESSING_ACTIVITIES
The following activities may involve personal data (e.g. IP address as part of server logs). Legal bases refer to Regulation (EU) 2016/679 (GDPR).
Website delivery & hosting (Cloudflare Pages)
Purpose: Providing the site and TLS termination at the edge.
Categories: IP address, timestamp, requested URL, referrer, user agent (as processed by the host).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation of the website).
Recipient: Cloudflare, Inc. (including Cloudflare Germany GmbH for regional operations) as infrastructure provider — see Cloudflare’s privacy notice and DPA.
Retention: according to Cloudflare’s log settings (often short rolling periods; see their documentation for the product in use).
Third countries: Cloudflare may process in the U.S. and other regions; the provider relies on appropriate safeguards (e.g. Standard Contractual Clauses) where required.
Webfonts (@nuxt/fonts — first-party delivery)
Purpose: Displaying typography using font files that are part of this deployment.
Visitor requests: We use Nuxt Fonts so typefaces are bundled and served from the same host as the rest of the site. Visitors’ browsers do not load fonts from Google’s servers, and we do not send font-related requests to Google on your device when you use this website.
Personal data: Loading these files is like loading any other static asset: the usual server / edge log data may apply (see “Website delivery & hosting” above). There is no separate Google-facing font connection from visitors.
Build / CI: When we build the site, our tooling may download font files from an upstream catalog (the Google Fonts catalog is configured as a source in code). That step runs on our build environment (e.g. developer machine or CI), not in visitors’ browsers, and is separate from live browsing.
Legal basis (delivery to you): Art. 6(1)(f) GDPR (legitimate interest in presenting the site, including readable typography), together with the hosting activity above.
GitHub (external; only if you visit or use it)
Purpose: Hosting source code and community features when you leave this site for our repository or open issues/discussions.
Legal basis: Art. 6(1)(f) GDPR (your voluntary use of GitHub) and, where you create content, GitHub’s contract with you.
Recipient: GitHub, Inc. / Microsoft — processing is governed by GitHub’s privacy statement.
Third countries: U.S. and other locations per GitHub; appropriate safeguards per their terms.
Email contact
Purpose: Handling your inquiry.
Categories: sender address, content, metadata.
Legal basis: Art. 6(1)(f) GDPR (responding to requests) and, if contractual, Art. 6(1)(b).
Retention: until the matter is resolved and statutory retention periods expire.
## YOUR_RIGHTS
// What contents serves which purpose
> const gdpr_rights = [...]
gdpr_rights.forEach((right) => {
console.log(right.name)
console.log(right.description)
})
Where we process your data, you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21) where the legal requirements are met. You may withdraw consent at any time if processing is based on consent (Art. 7(3)).
right_of_access
Confirmation of processing and a copy of personal data
right_to_erasure
Deletion where grounds apply
right_to_object
Object to processing based on legitimate interests (Art. 21(1))
right_to_rectification
Correction of inaccurate data
right_to_portability
Structured, machine-readable copy where applicable
right_to_complain
Lodge a complaint with a supervisory authority (Art. 77 GDPR)
## SUPERVISORY_AUTHORITY
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement (Art. 77 GDPR).
For the controller’s location in North Rhine-Westphalia (Cologne), the competent authority is typically:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Postfach 20 04 44, 40102 Düsseldorf, Germany
## NO_SALE_OF_DATA
We do not sell personal data (including in the sense of some non-EU privacy laws). Automated decision-making with legal or similarly significant effects under Art. 22 GDPR, including profiling, does not occur on this website.
## SECURITY
[✓] TLS (HTTPS) when delivered via the configured host
[✓] Data minimization for the functions described above
[✓] No behavioral ad networks operated by us on this site
## CHANGES