Website privacy

1. Scope and controller

This policy describes the information pages on vareldan.com, including the product pages, and email enquiries to Vareldan Studio. The controller is:

Vareldan Studio is the publisher name used by Ali Demirkol. Privacy enquiries: studio@vareldan.com.

Processing within the apps is covered by the separate privacy policies for DearRoll, VideoPasst and Feori. Feori’s sign-in, invitation and guest-poll pages provide online features rather than just information. Their additional data processing and browser storage are described in the Feori privacy policy. The statements below about the website refer to the information pages and do not replace that policy.

2. Hosting and server logs

The website and email mailboxes are provided by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Requests for pages, images and videos are processed by the host. This includes the IP address, request time, requested path, response status, transferred bytes and, where sent by the browser, referrer and browser information.

These data are used to deliver the website and maintain its security and reliability. The legal basis is Article 6(1)(f) GDPR, based on those legitimate interests.

STRATO states that it retains visitor IP addresses for attack detection and prevention for no more than seven days. IP addresses in customer-accessible logs are anonymised. This is not a blanket retention period for all hosting data. See STRATO’s hosting information.

STRATO acts as a processor for hosting and email. Its documentation describes data centres in Germany. STRATO’s data-processing agreement sets out the contractual arrangements.

To understand whether our posts lead to website visits and clicks to Google Play, we use dedicated entry and redirect links. Requests to these links appear in the existing STRATO access logs. We review totals by source channel, app and time period, without creating additional visitor profiles or identifiers.

When you arrive through our Instagram link, the address includes the general source label via=instagram. A script carries this label into links between our information pages without saving it in cookies or browser storage. Links to Google Play also contain general channel and campaign labels. Everyone using the same link shares these labels; they do not identify an individual. This processing serves our legitimate interest in understanding the impact of our posts (Article 6(1)(f) GDPR). The counts represent link requests, not unique people or confirmed installations.

3. Cookies and browser storage

We do not use advertising trackers. Optional statistics cookies are set only with your consent; see section 8. When you use the light/dark button, your browser stores a display preference: the local-storage entry vareldan-theme contains light or dark. It is read on later visits and is not sent to Vareldan Studio. Without a stored choice, the page uses your system colour preference.

This entry has no automatic expiry. You can remove it by deleting this website’s data in your browser. Remembering the explicitly requested display setting is based on section 25(2)(2) TDDDG. The website also uses ordinary browser caching for its files; this is not a visitor identifier.

Your statistics choice is stored locally as vareldan-cookie-consent-v2 with the decision and its time. It expires after 180 days and is not sent as a visitor identifier. This necessary storage remembers your explicitly selected privacy preference (section 25(2)(2) TDDDG). Previous consent to cookieless measurement is not treated as consent to statistics cookies. You can change it in Cookie settings or remove it by clearing website data. If storage is unavailable, we may ask again on the next page.

4. Images, videos and the swipe demo

Images, scripts, styles and the DearRoll videos are served from this website, not from YouTube, Vimeo, an external font service or a social-media plugin. Loading them creates ordinary requests to the host described above.

The DearRoll swipe demo uses sample images supplied by the website. It does not access your photos. Choices, counters and gesture state stay in the page’s memory; the website does not save them in browser storage or send them to a server. The demo does not delete files. The information pages have no contact form, file upload or user account.

5. Email enquiries

Publisher and VideoPasst enquiries go to studio@vareldan.com; DearRoll enquiries go to dearroll@vareldan.com. Clicking an email link opens your email application; it does not itself send a message.

If you send a message, we process the sender address, any supplied name, message, attachments and technical email headers to answer it. Please send only information needed for your enquiry. Contract-related requests are handled under Article 6(1)(b) GDPR, legal duties under Article 6(1)(c), and general enquiries under Article 6(1)(f), based on the interest in answering them.

Messages are retained while needed to deal with the enquiry, meet an applicable retention duty or establish or defend legal claims. Information is provided voluntarily; without enough information we may be unable to answer.

6. External links

Links to external information pages are ordinary links, not embedded services. If you follow one, the destination processes your visit under its own privacy information. Your email provider is also responsible for its own service.

7. Your rights

Subject to the applicable conditions, you can request access, correction, erasure, restriction and data portability. Where processing relies on legitimate interests, you can object for reasons relating to your situation. Any consent can be withdrawn for the future without affecting earlier lawful processing.

You may complain to a supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin. Contact us at studio@vareldan.com to exercise your rights. The website does not make automated decisions about visitors or create advertising profiles.

8. Website statistics with Matomo

With your voluntary consent, we use self-hosted Matomo on our STRATO hosting to analyse visits, page views, sanitised referrer and campaign information, and clicks to our Google Play pages. The legal bases are section 25(1) TDDDG for statistics cookies and Article 6(1)(a) GDPR for the analysis. Without consent, the Matomo script is not loaded and no Matomo tracking requests are sent. Declining does not limit your use of the website.

Matomo uses first-party statistics cookies with the prefix _vs_m_. The id visitor cookie stores a random browser identifier and visit information (up to 180 days). The ref referral cookie stores sanitised traffic-source and campaign information (up to 180 days); the ses session cookie groups actions into a visit (30 minutes). Cookie names also contain the site ID and a technical suffix. We do not link the identifier to app accounts, names or email addresses. These cookies help recognise returning browsers and attribute later visits. IP addresses are truncated by two bytes. Sensitive URL parameters and fragments are removed from the data sent to Matomo. Measurement covers only our public home and app information pages, not the apps themselves, sign-in, forms or Feori's web application. Do Not Track is respected.

Matomo's internal cleanup deletes raw data after 180 days and aggregated reports after 12 months. Cleanup runs at intervals and may occur later when the system is idle.

You can withdraw your consent at any time using Cookie settings in the footer. This stops further measurement and removes our statistics cookies from this browser; it does not undo earlier processing. Recognition is limited to the particular browser: visitor counts are not a reliable count of individual people. Consent choices, browser settings and blockers can cause gaps. Store clicks do not prove an installation.