PRIVACY POLICY

1. WHO IS RESPONSIBLE

Autarky Innovation LLC is the controller for the processing described here. For any privacy question or to exercise the rights in section 9, contact support@facetflux.com.

2. WHAT IS STORED ON YOUR DEVICE

Exactly two items, both of which exist only to remember a choice you made:

• NEXT_LOCALE — a cookie holding the language you are viewing the site in, so you are not switched back on the next page.
• theme — a local storage entry holding your light or dark mode choice.

Neither contains an identifier, neither is readable by anyone else, and neither is used to recognise you. Both are user-interface preference storage and are exempt from the consent requirement in § 25(2) TDDDG. Clearing your browser storage removes them.

Signing in at app.facetflux.com additionally sets a session cookie, which is necessary to keep you logged in. See section 6.

3. WEBSITE ANALYTICS

We measure traffic with our own analytics service, BrandKarma, running on our own infrastructure. No third-party analytics provider receives your data. For each page view we record:

• the page address and the referring page;
• your browser, operating system and device type;
• an approximate location (country, region, city) derived from your IP address;
• campaign parameters carried in the link you arrived through (see section 4);
• the date and time.

Your IP address is not stored. It is used momentarily to look up the approximate location and to group requests into a visit, then discarded. To group requests, we derive a value from your IP address and browser identification and keep it in memory for 30 minutes; that value is never written to your device and never stored. What is stored alongside the page view is a random visit number that carries no information about you and cannot be connected to a later visit.

Because this measurement places nothing on your terminal equipment and reads nothing from it, it does not require consent under § 25 TDDDG. We rely on our legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR).

4. ADVERTISING AND CAMPAIGN MEASUREMENT

When you reach us from an advertisement, a newsletter or a social post, the link may carry campaign parameters such as utm_source, utm_campaign or an advertising click identifier such as gclid. We read these from the address of the page you land on.

If you then move from this website to app.facetflux.com, those parameters are passed along in the link and, should you create an account, stored with that account on our servers. We use them to report which campaigns produce customers, and to tell the advertising platform that a click it sent us resulted in a signup or a purchase. Only the click identifier and the fact of the conversion are shared back with the advertising platform — never your name, email address or any catalog data.

These parameters are held only for the life of the page in your browser's memory. Nothing is written to cookies, local storage or session storage, so closing the tab erases them. The legal basis is our legitimate interest in measuring advertising effectiveness (Art. 6(1)(f) GDPR).

5. FREE TOOLS ON THIS WEBSITE

The validators and converters under /tools run in your browser or are processed transiently on our servers to return a result. Files you supply to them are not retained after the result is produced and are not used to train models. We record that a tool was used, but not what you put into it.

6. THE PLATFORM AT APP.FACETFLUX.COM

Creating an account requires an email address and a password. Signing in sets a strictly necessary session cookie; this is required to keep you logged in and is exempt from consent. Product data you upload is processed to provide the service as described in our Terms of Use. The legal basis for account and catalog processing is performance of a contract (Art. 6(1)(b) GDPR).

7. PROCESSORS AND TRANSFERS

We use service providers for hosting, payment processing and email delivery. They act on our instructions under data processing agreements. Autarky Innovation LLC is established in the United States, so personal data is processed there; transfers rely on the EU Standard Contractual Clauses.

8. RETENTION

Analytics records are kept in aggregate form and contain no IP address. Account data is kept while your account is open and deleted within 90 days of closure, except where a longer period is required by tax or accounting law. Uploaded catalog data in the staging layer is ephemeral, as described in the Terms of Use.

9. YOUR RIGHTS

If the GDPR applies to you, you have the right to access, rectify, erase, restrict and port your personal data, and to object to processing based on legitimate interest. Write to support@facetflux.com and we will respond within one month. You may also complain to a supervisory authority in your country of residence.

Because our website analytics store no identifier tied to you, we are generally unable to isolate your individual page views — there is nothing on our side that links them to you (Art. 11 GDPR).

10. CHANGES

If we introduce a technology that does require consent, we will ask for it before it runs, and update the date at the top of this page.