Privacy policy

This policy explains what personal data is processed when you visit pipelino.dev, why, and what rights you have. The pipelino library runs in your own app; this policy covers only the website.

• No cookies, accounts, forms, or advertising.
• The demo runs in your browser on simulated work. It sends nothing.
• Cloudflare delivers the site and processes connection data to do so.
• Our own Umami server counts page views and a few clicks without cookies or stored IP addresses, and you can opt out.

Controller

Full provider details are in the legal notice.

Hosting and delivery

pipelino.dev is a static website served by Cloudflare, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. To deliver pages and protect the site against attacks, Cloudflare processes what your browser sends with every request: your IP address, the requested address, date and time, the referring page, your browser and operating system, and technical connection data.

• Legal basis: our legitimate interest in delivering the site securely and reliably (Art. 6(1)(f) GDPR).
• Processor: Cloudflare processes this data on our behalf under a data processing agreement (Art. 28 GDPR).
• Transfer to the USA: Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, which the European Commission has found to provide adequate protection (Art. 45 GDPR).
• Retention: we don't keep these request logs ourselves; Cloudflare keeps them only as long as delivery and security require.

The demo

The demo on the home page runs pipelino in your browser. Its photos are placeholders and the work is simulated: nothing is uploaded or sent anywhere.

Analytics with Umami

We count page views with Umami, open-source analytics that we run ourselves at analytics.smart-byte.com on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, located in Finland. Hetzner processes this data on our behalf under a data processing agreement (Art. 28 GDPR); nobody else receives it. When a page loads, and when you use one of a few controls, a small script sends:

• the page's address, without query string or fragment, and its title;
• the website you came from, which browsers usually share only as a domain;
• which control you used, such as copying a command, starting the demo, or following a link to GitHub;
• your browser, operating system, device type, screen size, and language;
• your approximate location (country, region, and city), looked up from your IP address on our server.

Umami sets no cookies and stores nothing on your device. It does not store your IP address: to tell visits apart, it derives a pseudonymous identifier from your IP address, your browser's user agent, and a salt that changes every day, so visits cannot be linked across days. We look at the results only in aggregate, to see what helps and what to improve. We don't build profiles or combine this data with anything else.

• Legal basis: our legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR).
• Retention: analytics records are deleted after 13 months.
• Your choice: Umami doesn't count browsers that send Do Not Track, and you can turn it off for this browser below.

Data stored in your browser

The site remembers your color theme in your browser's local storage under theme. If you opt out of analytics, umami.disabled is stored there too. Both stay on your device and are never sent to us. They are strictly necessary for functions you use (§ 25(2) No. 2 TDDDG), so no consent is needed; you can delete them anytime in your browser settings.

Email

When you email us, we process your email address, your message, and anything you include, to answer you. The legal basis is Art. 6(1)(b) GDPR if your message concerns a contract or its preparation, and otherwise our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR). Our email runs on Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which processes it on our behalf under a data processing agreement. Google may process data in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. We delete correspondence once it is resolved, unless commercial or tax law requires us to keep it (up to six or ten years under § 257 HGB and § 147 AO).

Links to other websites

The site links to GitHub, npm, and imagefast.dev. Your browser contacts those sites only when you follow a link, and their privacy policies apply there.

Your rights

You have the right to access your personal data (Art. 15 GDPR), to have it rectified (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), and to data portability (Art. 20). Write to info@smart-byte.com. Because we store no IP addresses and no identifiers tied to a person, we usually cannot link analytics records to you.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

Other information

You don't have to provide personal data. Without the connection data your browser sends, the site cannot be delivered; analytics is optional. We don't use automated decision-making or profiling (Art. 22 GDPR). We update this policy when the site or the law changes.

Last updated: 10 November 2026