Privacy

Privacy policy

Last updated: November 2026

This policy explains what personal data is processed when you visit alienboxworks.com, email me, or buy a product. The short version: this site sets no cookies, runs no analytics or advertising trackers, and loads its fonts from its own server, not from Google.

1. Who is responsible

2. Visiting this website (hosting)

This site is hosted on Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open a page, your browser automatically sends technical data that Cloudflare needs to deliver and protect the site: your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating system.

This processing is based on my legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR). I do not combine this data with other sources or use it to identify you. Cloudflare acts as my processor. Cloudflare is certified under the EU-US Data Privacy Framework, and transfers to the USA are also covered by the EU Standard Contractual Clauses in Cloudflare's data processing terms.

3. Cookies, analytics and fonts

This site does not use cookies, analytics tools, social media plugins or advertising trackers. All fonts are stored on and served from this website, so no data is sent to font providers.

4. Contacting me by email

If you email me, I process your email address, your name if you give it, and the content of your message, in order to reply. Emails sent to [email protected] are received by Cloudflare Email Routing (Cloudflare, Inc., USA) and forwarded to my Gmail inbox, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis is Art. 6(1)(b) GDPR where your message relates to a purchase or a possible contract, and otherwise my legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). I delete correspondence when it is no longer needed, unless I am legally required to keep it.

5. Buying a product

Purchases are handled by [Payhip — confirm the provider's company name and address from its privacy policy]. When you buy a product, the shop provider processes your name, email address, billing country and order details, and the payment is processed by Stripe or PayPal. I receive your name, email address and order details so that I can deliver your product, provide support and meet my accounting obligations.

The legal basis is the performance of our contract (Art. 6(1)(b) GDPR) and my legal obligations (Art. 6(1)(c) GDPR). Order and invoice records are kept for the periods required by tax and commercial law, generally up to 10 years. Please also see the privacy policies of the shop provider and payment provider you use.

6. Links to other websites

This site links to other websites, such as LinkedIn, Substack, Winged Time Traveller, Creatives Around Us and my BragBook. They are plain links, not embedded content: no data is sent to those sites unless you click a link. Once you do, their own privacy policies apply.

7. Your rights

Under the GDPR you have the right to:

• access the personal data I hold about you (Art. 15)
• have it corrected (Art. 16) or deleted (Art. 17)
• restrict its processing (Art. 18)
• receive it in a portable format (Art. 20)
• object to processing based on legitimate interests (Art. 21)
• withdraw any consent you have given, with effect for the future (Art. 7(3))

To use any of these rights, email [email protected]. You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work.

8. Other information

You are not required to provide personal data to browse this site. If you want to buy a product, the details needed to complete the order are required. I do not use automated decision-making or profiling.

I may update this policy when the site or my services change. The current version is always on this page.