Legal

Privacy Policy

Makefield · Berlin

Controller

Email: hello@makefield.io

Overview

This is a static, editorial website. It sets no cookies, does no cross-device tracking and creates no user accounts. For statistical reach measurement we use a cookieless analytics service (Cloudflare Web Analytics, see below). Otherwise, personal data is processed only where technically necessary to operate the site (server log data) or when you contact us by email.

Hosting (Cloudflare)

This website is served via Cloudflare Workers by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When the pages are accessed, Cloudflare processes technically necessary server log data, including IP address, date and time of access, the URL requested, referrer and user agent, to deliver the site securely and reliably and to defend against attacks. The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). A data processing agreement is in place with Cloudflare (the Cloudflare Data Processing Addendum, part of its terms). Transfers to the USA rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework; Cloudflare, Inc. states that it is certified under it (Cloudflare privacy policy, effective 4 November 2025).

Retention of log data: Cloudflare does not state a fixed period; the data is deleted once it is no longer needed for these purposes. In our Cloudflare account we only see aggregated figures.

Analytics (Cloudflare Web Analytics)

To understand usage statistically we use Cloudflare Web Analytics. Your browser loads a small script from Cloudflare (static.cloudflareinsights.com) that sends measurements such as the page viewed, the referrer and load times to Cloudflare; browser, device type and approximate country come from the information your browser sends anyway. It sets no cookies, stores no identifier on your device, performs no cross-device tracking and builds no user profiles. We only see aggregated figures.

Whether running such a script counts as access to your device under § 25(1) of the German TDDDG is assessed differently. We consider it permissible without consent, because nothing is stored on your device and nothing is read beyond what displaying the page requires; this assessment has not been settled by the courts. The legal basis for the processing is our legitimate interest in data-minimising reach measurement (Art. 6(1)(f) GDPR). Any common content blocker prevents the script; the site then works unchanged.

Automated traffic / bots

Cloudflare shows us, in aggregate, what share of accesses comes from automated services (bots, crawlers, AI agents). We use these figures for the security of the site and for statistics, without profiles of individual people (Art. 6(1)(f) GDPR).

Contact by email

If you contact us by email, we process your details (email address and message content) solely to handle your enquiry. The legal basis is our legitimate interest in responding to your enquiry (Art. 6(1)(f) GDPR). The data is deleted once it is no longer required and no statutory retention obligations apply. Email is provided via Apple iCloud (Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland), which processes these messages on our behalf as the provider of the mailbox. A transfer to Apple Inc. in the USA cannot be ruled out. Apple Inc. is not listed under the EU-U.S. Data Privacy Framework (checked in the official list on 1 October 2026), so such a transfer rests on the safeguards in Apple's own terms.

Research partners

If a company takes part in a study as a research partner, we keep its emails and its written agreement, the public sources it points to, and the answers the AI engines give, for as long as the study is open and, for a published study, as long as the study is online. Only the company's name and its publicly documented facts go into the questions asked of AI engines; emails and personal details never do. The legal basis is our legitimate interest in carrying out and documenting the study (Art. 6(1)(f) GDPR).

Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20 GDPR). To exercise these, contact the address above. You also have the right to lodge a complaint with a data protection supervisory authority; the competent authority is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

Right to object (Art. 21 GDPR)

All processing described here is based on our legitimate interest (Art. 6(1)(f) GDPR). You may object to it at any time on grounds relating to your particular situation. An informal message to hello@makefield.io is enough.

Last updated

1 October 2026. This policy will be updated if the website changes (e.g. further services or forms).

This English text is a courtesy translation; the German version is legally authoritative.