Website Privacy Policy

Last updated: 11 October 2026

1. Scope of This Privacy Policy

This privacy policy explains how personal data is processed when you visit arcalyra.com, contact ArcaLyra by email, or follow external links provided on the website.

This privacy policy applies only to the ArcaLyra website. The ArcaLyra app is covered by a separate App Privacy Policy.

2. Controller

The controller responsible for processing personal data on this website is:

Birk Roolf

ArcaLyra

Ahornstr. 1

75045 Walzbachtal

Germany

Email: hello@arcalyra.app

3. General Data Protection Principles

ArcaLyra follows a data-minimising approach.

Optional Google Ads measurement is used only after consent, as explained below. Embedded social media feeds and independent analytics services are not used.

Squarespace’s activity log is disabled and its non-essential cookies remain restricted. Apart from optional consent-based Google Ads measurement, personal data is processed where necessary to provide the website securely, respond to inquiries, prevent misuse, or comply with legal obligations.

4. Website Hosting and Technical Data

This website is created and hosted using Squarespace.

When you access the website, Squarespace may process technical information required to deliver and secure the website. This may include:

• IP address

• Date and time of access

• Requested page or file

• Browser type and version

• Device and operating system information

• Referring website, where provided by the browser

• Technical error, diagnostic, and security information

This processing is necessary to display the website, maintain its security and stability, prevent misuse, and investigate technical problems.

The legal basis is Article 6(1)(f) GDPR. The legitimate interests are the secure, reliable, and technically functional operation of the website.

Technical information is retained only for as long as necessary for website delivery, security, troubleshooting, and the fulfilment of applicable legal obligations. Squarespace may also process certain technical information under its own responsibility and in accordance with its own privacy policy.

5. Cookies and Similar Technologies

Squarespace’s non-essential cookies remain restricted and its activity log is disabled. The separately consented Google Ads cookies are described in the next section.

The website may still use cookies, local storage, or similar technologies that are technically necessary for functions such as:

• Secure website delivery

• Session and security management

• Spam and abuse prevention

• Correct display and operation of the website

These technologies are not used by ArcaLyra for personalised advertising or independent visitor tracking.

The processing of personal data associated with technically necessary technologies is based on Article 6(1)(f) GDPR. Access to or storage of information on the user’s device is carried out only where technically necessary within the meaning of Section 25(2) TDDDG.

7. Google Workspace Email Processing

The website currently provides direct email contact instead of a web contact form. No files are uploaded through the website, and Google reCAPTCHA is not used. You may include screenshots as email attachments. Please avoid unnecessary personal, confidential, or sensitive information.

Messages sent to hello@arcalyra.app are received and processed through Google Workspace.

Google may process message content, email addresses, attachments, technical delivery information, and account-related metadata as necessary to provide the email service, protect it against spam and misuse, and maintain its security.

The legal basis corresponds to the purpose of the respective communication:

• Article 6(1)(b) GDPR for contractual or pre-contractual inquiries

• Article 6(1)(f) GDPR for general inquiries, support, feedback, and bug reports

Emails are deleted when they are no longer necessary for the respective purpose, generally no later than six months after the matter has been completed, unless statutory retention obligations or the defence of legal claims require longer storage.

8. External Links

The website contains external links, including links to:

• The ArcaLyra profile on Instagram

• The ArcaLyra listing on Google Play

• The ArcaLyra listing on the Apple App Store

• The ArcaLyra community on Discord

These services are not embedded as social media feeds, videos, or interactive third-party content. No connection to the respective external service is intentionally established merely by displaying the link.

When you click an external link, you leave arcalyra.com. The destination service may then process personal data, including your IP address, device information, account information, and usage data, in accordance with its own privacy policy.

ArcaLyra has no control over the processing performed by the operator of an external website after the link has been opened.

9. Service Providers and Recipients

Personal data may be disclosed where necessary to operate the website, process an inquiry, fulfil legal obligations or protect legal rights, and to Google for advertising measurement if you consent.

The principal service providers used for this website are:

• Squarespace for website hosting and website infrastructure

• Google Workspace for receiving, storing, and responding to email communications

• Google Ads for optional, consent-based advertising measurement

Personal data is not sold.

Google receives the technical measurement data described above only after consent. ArcaLyra does not use this website tag for personalised advertising or remarketing.

Data may also be disclosed to courts, authorities, legal advisers, or other authorised recipients where required by law or necessary for the establishment, exercise, or defence of legal claims.

10. International Data Transfers

Squarespace and Google operate internationally. Personal data may therefore be processed in countries outside Germany or the European Economic Area, including the United States.

Where personal data is transferred to a country outside the European Economic Area, the transfer is based on an applicable legal safeguard. Depending on the recipient and circumstances, this may include:

• An adequacy decision by the European Commission

• Participation in the EU–U.S. Data Privacy Framework

• European Commission Standard Contractual Clauses

• Other legally recognised transfer safeguards

Further information about international processing and the safeguards used is available in the respective privacy and data processing documentation of Squarespace and Google.

11. Data Security

Reasonable technical and organisational measures are used to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction.

Access to contact inquiries and email attachments is limited to the extent necessary to process the respective request.

However, no transmission or storage system can guarantee absolute security. Users should therefore avoid sending information that is not necessary for their inquiry.

12. Automated Decision-Making

ArcaLyra does not use personal data collected through this website for automated decision-making or profiling that produces legal effects or similarly significant effects.

13. Your Rights

Subject to the conditions of applicable data protection law, you may have the right to:

• Request access to your personal data

• Request correction of inaccurate or incomplete personal data

• Request deletion of your personal data

• Request restriction of processing

• Receive personal data in a structured, commonly used, and machine-readable format where the right to data portability applies

• Object to processing based on legitimate interests

• Lodge a complaint with a data protection supervisory authority

Where processing is based on Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.

To exercise your rights, contact:

hello@arcalyra.app

Additional information may be requested where reasonably necessary to verify your identity and protect personal data against unauthorised disclosure.

14. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority.

The supervisory authority generally responsible for the controller is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

(Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg)

You may also contact another competent supervisory authority, particularly in the EU member state of your habitual residence, place of work, or the place of the alleged infringement.

15. Changes to This Privacy Policy

This privacy policy may be updated where the website, its functions, the service providers used, or the applicable legal requirements change.

The current version is always available on this website. The date of the latest revision is shown at the beginning of the policy.