In short: the hand analysis runs entirely in your browser - your photo never leaves your device. We set no cookies of our own and run no analytics. Advertising via Google AdSense is loaded only after your consent.
1. Controller
Marc Dornieden, Hauptstr. 80, 31089 Duingen, Germany · E-mail: marc.dornieden@googlemail.com
2. Overview
We do not collect personal data ourselves, except for the technically necessary server log data (section 5) and data you consent to via Google AdSense (section 6).
3. Hand analysis
The analysis runs locally in your browser. There is no upload, no server-side image processing and no transfer to third parties. We use the MediaPipe Hand Landmarker model by Google, hosted on our own server (no CDN). The model and the computing library are downloaded once (about 17 MB) and cached by your browser. No images, landmarks or analysis data are transmitted.
4. Contact by e-mail
If you contact us by e-mail, your details (name, e-mail address, message) are stored to process the request and for possible follow-up questions (Art. 6 (1) (f) GDPR). The data is deleted once the request is completed and no statutory retention obligations apply. The contact form on our German site only opens your e-mail client - no data is sent to our server.
5. Server log files
Our hosting provider STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany (Amtsgericht Charlottenburg (Berlin), HRB 270570 B), automatically collects technical data in server logs: browser type and version, operating system, referrer URL, hostname, time of request and IP address. This data is not merged with other sources and is processed on the basis of Art. 6 (1) (f) GDPR (legitimate interest in a technically flawless website). The provider processes the data on our behalf (data processing agreement under Art. 28 GDPR). Log files are rotated regularly (currently about monthly); the current file and one previous archive are kept - up to about two to three months. After that they are deleted.
6. Google AdSense
Advertising is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The AdSense loader is included on page load; ads are only served after your consent in the consent banner. Google uses cookies and similar technologies (e.g. IDE, test_cookie, _gcl_au) to deliver ads, measure their effectiveness and prevent fraud. Data processed may include IP address, browser type, operating system, device information, referrer, pages visited and interaction data. Legal basis: your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time (section 7). Data may be transferred to the USA; Google LLC is certified under the EU-US Data Privacy Framework.
You can deactivate personalised advertising at adssettings.google.com and aboutads.info. More information: policies.google.com/privacy.
7. Consent management (CMP)
Consent is managed by Google's consent management platform ("Privacy & Messaging"). On your first visit a banner appears where you can accept or refuse advertising purposes. Your choice is stored by Google in your browser and transmitted via Google Consent Mode v2. Ads are only served after consent. You can reopen the banner by clearing site data in your browser or adjust your settings at adssettings.google.com.
8. Cookies
We set no cookies of our own. The core functions, including the hand analysis, work without cookies or tracking. Only when you consent to advertising does Google AdSense set its own cookies.
9. External resources
The MediaPipe model and library are served from our own server (no CDN). If our files are not available in a rare case, the browser falls back to jsDelivr (CDN) or Google storage; in that case your IP address is technically transmitted to that provider. Google AdSense is included for advertising (section 6). No Google Analytics, no Facebook pixel, no Hotjar, no other analytics or tracking tools.
10. Your rights
You have the right to access, rectification, erasure and restriction of processing, data portability and the right to object (Art. 21 GDPR) where processing is based on Art. 6 (1) (f) GDPR. You may withdraw consent at any time with effect for the future. You have the right to lodge a complaint with a supervisory authority: Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany (www.lfd.niedersachsen.de).
11. Security
We use SSL encryption (HTTPS) for all data transmission between your browser and our server.
12. Contact
Questions about privacy: marc.dornieden@googlemail.com