Privacy policy

This is a translation for convenience. In case of doubt, the German version prevails, as does German law.

The short version

This site is deliberately data-thrifty. It sets no cookies, stores nothing on your device, and loads nothing from third-party servers — we even serve the typefaces ourselves instead of fetching them from Google. That is why you see no consent banner here: there is nothing for you to consent to.

What unavoidably happens: our host records your page request in server logs, and we count anonymously, in a database of our own, which pages are opened and which tools are used. The tuning tools only listen if you allow it, and they analyse the sound in your browser. All of this is detailed below.

Controller

The controller responsible for data processing on this website is:

LGA International GmbH Stotzstraße 8 70190 Stuttgart Deutschland

We have not appointed a data protection officer; we are not required to.

Visiting the site and server logs

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you open a page, Vercel processes technically necessary connection data in server logs: your IP address (in full or shortened), date and time, the address requested, the referrer you arrived from, and browser and operating system details.

Purpose and legal basis: Without this data the page cannot be delivered; it also serves to defend against attacks and to find faults. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure and uninterrupted operation of the website.

Processing agreement and third country: A data processing agreement under Art. 28 GDPR is in place with Vercel. Processing also takes place in the United States. Vercel is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023); in addition, the EU standard contractual clauses under Art. 46 (2) (c) GDPR apply. This cannot guarantee an absolute level of protection: under certain conditions, US authorities may access data.

Retention: Vercel deletes these logs automatically after a short period. We do not evaluate them on a personal level and do not combine them with other data.

Search engine visits

We want to know which of our pages search engines such as Google or Bing have already fetched. For this, Vercel additionally forwards the server logs described above to a service of our own at krabbel.anotona.com, run by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. There, every request is first checked for whether it comes from a search engine. Requests from people are discarded immediately, without anything being stored.

Of search engine requests, only the name of the search engine, the page fetched, the time and the response status are kept. The IP address is never stored; it is used solely to compare it against the address lists Google and Bing publish for their crawlers, and only a yes or no remains.

Legal basis: Art. 6 (1) (f) GDPR; our legitimate interest is knowing which pages can be found in search engines. For the processing agreement and the transfer to the USA, see what is said about Cloudflare in the next section.

Anonymous visit counting

We want to know which pages are read and whether our tools work. For this we count page views in a database of our own. Collection runs via mess.anotona.com, a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.

Stored per event: time, type of event (page view, section seen, click with target, scroll depth reached, first operation of a tool, time on page), the page opened, the language version, the device class, the country, the origin (only the name of the website you came from, such as google.com — never the full address), the seconds since the page was opened, a random identifier valid for this single page view only, and the sequence number of the event within that page view (so that an event transmitted twice is not counted twice).

Not stored: no IP address. The country comes from a value Cloudflare attaches to the request; we do not derive it from your address. The random identifier is created in the page's memory, is never written to your device, and is lost when you leave the page — it cannot be used to reconstruct your path across pages or to recognise you on a later day.

Purpose and legal basis: Art. 6 (1) (f) GDPR; our legitimate interest is improving the website. As no access to your device takes place, no consent is required under section 25 (1) TDDDG.

Processing agreement and third country: A data processing agreement under Art. 28 GDPR is in place with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework; the EU standard contractual clauses apply in addition. The same caveat as above applies.

Retention: Individual events are deleted automatically after 90 days; for longer periods we keep only daily totals without individual events.

No cookies, no storage on your device

This website sets no cookies and uses neither localStorage nor sessionStorage, no in-browser databases and no fingerprinting.

Microphone for the tuning tools

The tuners and the vocal range test need your microphone. They only ask for it when you start the tool, and they only listen if you allow it in your browser. The sound is analysed solely in your browser: it is neither recorded nor transmitted to us or to anyone else. You can withdraw the permission in your browser settings at any time.

Legal basis: Access to the microphone is strictly necessary for the tool you expressly open (section 25 (2) no. 2 TDDDG); no consent beyond the permission in your browser is required.

Typefaces served from our own server

All typefaces (Source Serif 4 and IBM Plex Sans, both SIL Open Font License) are served from our own server. No request is made to Google Fonts, so your IP address is not transmitted to anyone for this purpose. No maps, videos, social media buttons or other third-party content are embedded either.

Links to external sites

In the footer we link to the music engraving project Verovio (verovio.org). That is an ordinary link: data flows only once you click it, and the privacy terms of those providers then apply. We are not responsible for external content.

Encryption

The connection to this website is encrypted end to end with TLS, recognisable by https:// in the address bar.

Your rights

You have the right of access to the data we process about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Please contact the address given above.

Where you have given consent, you may withdraw it at any time under Art. 7 (3) GDPR. At present we do not base any processing on consent.

You may also lodge a complaint with a supervisory authority under Art. 77 GDPR. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart, Germany
baden-wuerttemberg.datenschutz.de

Further information

Do you have to provide data? No. This website has no form and asks for nothing. Beyond the technically necessary connection data, you give us nothing.

Automated decisions: No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

Changes: If we change the website technically, we will adapt this policy. The version published here applies.

As of 25 September 2026