Privacy Policy

Controller

Responsible for the data processing on this website (full contact details in the imprint):

Shadi Muma
muma.shadi@gmail.com

Your data stays in your browser

Everything you enter into Fallow — tasks, daily sessions, ratings, calibration data and model settings — is stored exclusively on your own device (IndexedDB and localStorage in your browser). This content is never transmitted to us or to any server, and there are no user accounts. If you clear your browser data, it is gone. The only data that does leave your browser are the four display-preference cookies described in the next section, which your browser sends with every request. This local storage is strictly necessary to provide the app and therefore requires no consent (§ 25 (2) TDDDG).

Cookies

Fallow sets four first-party cookies (path /), all of them display preferences — no identifier, no tracking, nothing about your tasks. The server reads them on every request so the very first paint already uses your theme and language: "theme" holds the selected colour theme (one year), "scenerySeed" a random number that varies the animated background (one year; the server generates it on your first visit, before you change anything), "sceneryMotion" whether background animation is paused (one year) and "PARAGLIDE_LOCALE" the interface language (about 13 months). They are strictly necessary for a service you explicitly requested, so no consent is required (§ 25 (2) TDDDG); the legal basis for the processing is our legitimate interest in rendering the page correctly on the first request (Art. 6 (1) (f) GDPR). You can delete them in your browser at any time — Fallow then falls back to its defaults.

Hosting (Vercel)

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit it, Vercel processes the data your browser transmits with each request — in particular your IP address, date and time, the requested page, browser and operating system — in server logs to deliver the site and to ensure its stability and security. The legal basis is our legitimate interest in the reliable operation of the site (Art. 6 (1) (f) GDPR).

Web analytics (Vercel Web Analytics)

We use Vercel Web Analytics to measure how this site is used in aggregate (page views, referrer, browser and device type, country/region derived from the IP address). The tool sets no cookies and stores nothing on your device. Visitors are counted via a hash derived from the incoming request; it is automatically discarded after 24 hours and cannot track you across other websites. The legal basis is our legitimate interest in privacy-friendly reach measurement (Art. 6 (1) (f) GDPR).

Performance measurement (Vercel Speed Insights)

We also use Vercel Speed Insights to collect anonymized loading-performance metrics (Core Web Vitals) for visited pages. It sets no cookies and builds no visitor profiles. The legal basis is our legitimate interest in keeping the site fast and working (Art. 6 (1) (f) GDPR).

Data transfers to the USA

Vercel Inc. is based in the USA. Vercel is certified under the EU-US Data Privacy Framework (DPF); in addition, Vercel's data processing agreement, which includes the EU Standard Contractual Clauses, applies. An adequate level of data protection is therefore ensured for these transfers (Art. 45, 46 GDPR).

Your rights

You have the right of access (Art. 15 GDPR) and the rights to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and — for processing based on legitimate interest — objection (Art. 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority. To exercise your rights, use the contact details given above.