Privacy

Updated 26 September 2026

1. Who we are

Volvelle Labs GmbH
Winterhuder Weg 29, 7th floor
22085 Hamburg, Germany
contact-arsumbris@proton.me

We are responsible for the processing described here. This notice covers the Ars Umbris website, its interactive demo and email enquiries. See our imprint for further company details.

2. Visiting this website

Our hosting provider, Vercel Inc., USA, processes IP addresses, request times, requested URLs and browser and connection information to deliver the website and protect it against errors and abuse. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in providing a secure, reliable website. Data necessary for transmission is required to display the website.

Vercel retains runtime logs for one day under our current hosting plan. We have not configured external log exports. This period does not cover all records Vercel processes for its own operational, security or legal purposes; their retention depends on the relevant purpose, incident investigation and applicable legal obligations, as described in Vercel’s privacy notice below.

Processing may take place in the USA and other countries outside the EU/EEA. Vercel’s Data Processing Addendum sets out its processor obligations and applicable transfer safeguards, including EU standard contractual clauses. Its privacy notice describes processing for which Vercel acts as an independent controller.

3. Demo and external links

The demo loads sample files from this website. Edits and terminal commands run locally in the browser and reset when the page reloads; they are not submitted to a live terminal or AI service. Requests for sample files are handled by our hosting provider as described above.

We do not use analytics or advertising tracking. Fonts are served through this website. Links to GitHub, Discord, X, YouTube and Reddit open services with their own privacy notices.

4. Email enquiries

We use Proton AG, Switzerland, for email. We process your address, message and any details you provide to respond to your enquiry. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in responding, or Article 6(1)(b) GDPR where the enquiry concerns a contract with you or steps you request before entering one. Providing this information is voluntary, but we need sufficient contact and enquiry details to reply.

We delete ordinary contact enquiries within 90 days after resolution. Correspondence subject to legal retention duties, or needed to establish or defend legal claims, is kept for the applicable period.

Switzerland benefits from an EU adequacy decision. Proton’s Data Processing Agreement describes its processor obligations and safeguards for onward international transfers.

5. Your rights

Subject to the legal conditions, you may request access, correction, deletion, restriction of processing and data portability (Articles 15–20 GDPR). Contact us at the email address above.

Right to object: Where we rely on legitimate interests, you may object to processing on grounds relating to your particular situation (Article 21 GDPR).

You may complain to a data protection authority, including the Hamburg Commissioner for Data Protection and Freedom of Information.