Privacy Policy
Last updated: July 14, 2026
This website is a personal portfolio. I keep data collection to the absolute minimum: there are no advertising trackers, no analytics services, and no cookies. This page explains what little processing does happen, in plain language.
Who is responsible
The controller for any personal data processed through this website is:
Andrew Gerlicher
Email: andrewgerlichermusic@gmail.com
Hosting and server logs
This site is hosted by Netlify, Inc. (San Francisco, USA). When you visit any page, Netlify's servers automatically process technical data needed to deliver the site — your IP address, browser type, and the pages requested. Netlify retains this log data for a short period for security and operational purposes. The legal basis is my legitimate interest in operating a secure, functioning website (Art. 6(1)(f) GDPR). Netlify participates in the EU–US Data Privacy Framework; details are in Netlify's privacy policy.
Fonts and scripts
All fonts and JavaScript libraries used by this site are served directly from this website's own domain. No requests are made to Google Fonts or other third-party content networks when you browse this site.
Contact form
If you use the form on the contact page, the name, email address, and message you enter are transmitted to and processed by Formspree, Inc. (USA), which forwards the message to my inbox. I use this data solely to respond to your inquiry. The legal basis is taking steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR) or my legitimate interest in responding to correspondence (Art. 6(1)(f) GDPR). Messages are kept only as long as needed to handle the conversation. See Formspree's privacy policy for their handling of transmitted data. You can always email me directly instead.
Online multiplayer (Dice & Deities)
The board game demo on this site includes an optional online multiplayer mode. Only if you actively choose "Host online" or "Join online," a peer-to-peer connection is established using the PeerJS public broker service, and — if a direct connection cannot be made — game moves are relayed through the public relay service ntfy.sh. In both cases your IP address is technically necessary to establish the connection, and randomly generated game codes and the player name you enter are transmitted. Nothing is stored by me. The legal basis is the performance of the feature you requested (Art. 6(1)(b) GDPR). Playing solo against the computer involves no network connection at all.
Embedded storefront (MakePlayingCards)
The games page contains an embedded storefront frame from MakePlayingCards.com. It does not load automatically: content from MakePlayingCards' servers (which involves transmitting your IP address to them) is only loaded after you actively click "Load storefront" inside the frame. The legal basis is your consent (Art. 6(1)(a) GDPR), given by that click. See MakePlayingCards' privacy information for their handling of data.
Local storage
The game stores small functional settings (sound on/off, your last game code so you can rejoin) in your browser's local storage. This data never leaves your device, is not used for tracking, and you can delete it at any time by clearing your browser data. No consent banner is required for strictly functional storage of this kind.
No cookies, no analytics, no ads
This site sets no cookies, runs no analytics, and shows no advertising. Your visit is not tracked or profiled.
Your rights
Under the GDPR you have the right to access, rectify, or erase personal data concerning you, the right to restrict or object to processing, the right to data portability, and the right to lodge a complaint with a supervisory authority. Since I store essentially nothing beyond email correspondence you initiate, the simplest way to exercise any of these rights is to email me.