Your data. Clearly explained.
Updated 3 November 2026 · diablo.tattoo
Scope & controller
These privacy notes apply to https://diablo.tattoo. The controller is Mario V.W.B.R. Obst. See the legal notice for the postal address and telephone number. Privacy enquiries: xyz@diablo.tattoo.
Language & saved designs
The website code sets no cookies. Once you make a selection, your language (diablo-language) and saved design IDs (diablo-favorites) are stored in this browser’s localStorage so that these expressly chosen functions remain available on your next visit. There are no accounts or server synchronisation. Storage has no fixed expiry and lasts until removal or deletion through your browser’s website-data settings; the browser may also delete it. Use the hearts to edit your list. You can use the site without saving designs. The basis for these requested functions is section 25(2)(2) TDDDG; where personal data are processed, Article 6(1)(f) GDPR (providing your chosen settings).
Creator, placement preview & downloads
Designs, filters and previews are processed in your browser. No photos are uploaded and no camera, microphone or location permissions are requested. Settings can appear after # in the URL; anyone receiving the full link can see those settings. This URL fragment is not sent to the hosting server during a normal page request. Individual SVG exports are generated in the browser. Downloading a ZIP requests a file from the hosting server.
Cloudflare hosting
Static files are served using Cloudflare Workers, Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Requests involve processing technical connection data, including IP address, time, requested address, HTTP headers and potentially referrer. The purpose is secure website delivery; the legal basis is Article 6(1)(f) GDPR. Processing outside the EU/EEA is possible. Cloudflare’s Data Processing Addendum addresses processing and international transfers, including standard contractual clauses where applicable. Our Worker observability logging is disabled. Cloudflare may still process and retain technical operational and security data under its contractual and privacy provisions. Retention depends on the data type, purpose and service; hosting is not claimed to be entirely free of data processing.
No visitor analytics
We do not use visitor analytics or create visitor profiles. There is no analytics beacon, advertising tracking or visitor database. No cookie banner is installed. Local storage of your expressly chosen language and saved designs is explained above. Cloudflare may still process technical operational and security data for hosting; this is separate from visitor analytics configured by us.
External services & AI
Fonts and website files are delivered with the site. No external videos or social feeds are embedded. Opening an external link contacts its destination, where that provider’s privacy rules apply. AI assists in creating the project; this website does not send visitor data or design requests to an AI API.
Contacting us
If you email, telephone or write to us, we process the details you voluntarily provide to answer your enquiry. The legal basis is Article 6(1)(f) GDPR, potentially Article 6(1)(b) for contractual enquiries and Article 6(1)(c) for legal duties. Communication and postal providers may receive data. JL Consulting Group GmbH handles the c/o address. Information is retained as required to handle the enquiry, meet legal obligations or defend legal claims. Emails to xyz@diablo.tattoo are forwarded through Cloudflare Email Routing to the operator’s mailbox. During forwarding, Cloudflare processes sender and recipient addresses, delivery information, message contents and attachments.
Your rights
Subject to statutory conditions, you have rights of access, rectification, erasure, restriction and portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. Consent can be withdrawn for the future. You may complain to a supervisory authority, particularly where you live, work or believe an infringement occurred. One contact is the Thuringian Commissioner for Data Protection and Freedom of Information. There are no automated decisions with legal or similarly significant effects.
Cloudflare Data Processing Addendum ↗
Cloudflare Privacy Policy ↗
TLfDI ↗