TYPHORA GROUP

Privacy Policy

1. Controller

Typhora Group LLC
Limited Liability Company (LLC), formed in Wyoming, United States
33 N Gould St, Sheridan, WY 82801, United States
Email: hey@typhora.group

2. General

This website is purely an information and brand presence. Without your consent no cookies are set and no analytics or advertising services are loaded. If you consent to analytics or marketing, Google Analytics and Google Ads are added (section 6). Independently of that, the only thing stored is the light/dark setting you choose, held in your browser's local storage — technically necessary for display, with no personal reference, and deletable at any time through your browser settings. Beyond that, personal data is processed only to the extent technically necessary (see server log files) or when you actively get in touch.

3. Server log files

When the website is accessed, the server automatically records data transmitted by your browser in server log files:

Purpose: technical delivery, stability and security of the website. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure, functioning operation). Retention: log files are deleted automatically after 14 days at the latest; sooner when traffic is high, because they also rotate by size. This data is not combined with any other data source.

4. Hosting

The website is hosted by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in a data centre in Germany. Hetzner processes the data named above on behalf of the controller as a processor (Art. 28 GDPR).

5. Contact form

The contact form on the start page transmits your entries — name, email address, message and the selected subject and company — to an endpoint at henny.info/api/contact. It runs on the same server in Germany (see hosting) and is operated by the same controller; no third-party form service is involved.

Your IP address and the time of submission are also processed, solely to prevent abuse (limiting the number of submissions per sender, detecting automated submissions). The message is stored on the server and delivered by email to the controller. Delivery uses the service provider Resend (operator: PLUS FIVE FIVE, San Francisco, USA) as a processor (Art. 28 GDPR), which processes the email address and dispatch data on the controller's behalf. Data is thereby transferred to the USA; the transfer is based on the adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR).

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual communication) and (f) (legitimate interest in responding and in protection against abuse). Retention: until your enquiry has been dealt with conclusively and no retention obligations remain. Providing the data is voluntary; without an email address and a message the enquiry cannot be answered. An informal email to hey@typhora.group works just as well.

6. Analytics and marketing (Google)

This site uses Google Analytics 4 (measurement ID G-JYS9K0RKYV) and, building on it, Google Ads including remarketing — both only to the extent you have consented in the cookie banner, where “Analytics” and “Marketing” can be agreed to separately.

With consent to analytics, cookies (including _ga) are stored on and read from your device and usage data is processed: pages viewed, time spent, click paths, origin (referrer, campaign parameters), approximate location derived from the IP address, device, operating system, browser and page language.

With consent to marketing, the following is added: Google Signals (cross-device analysis for users signed in to Google who have personalised advertising enabled), the building of remarketing audiences, measurement of ad conversions, and the transmission of advertising identifiers to Google. Without this consent, advertising identifiers are technically suppressed (ads data redaction).

Even without your consent the Google script is loaded and sends cookieless signals without an identifier, which Google uses for statistical modelling (Consent Mode). Your IP address is transmitted to Google in the process, but no cookie is set and no profile is created.

The provider is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland); data is also transferred to Google LLC in the USA. The transfer is based on the adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), supplemented by standard contractual clauses. Google processes some of the data as a controller in its own right; see Google's privacy policy for details.

Legal basis: your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Withdrawal: at any time via the Cookies link in the footer, where the selection can also be changed later; withdrawal takes effect for the future. Retention: the Google cookies expire after 24 months at the latest, the event data in GA4 after a maximum of 14 months; your choice itself is held in your browser's local storage.

7. Contact by email

If you get in touch by email, the details you provide (e.g. name, email address, content of the message) are processed solely in order to deal with your enquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual/contractual communication) and (f) (legitimate interest in responding). The data is deleted once the enquiry has been dealt with conclusively and no retention obligations remain.

8. Your rights

You have the following rights vis-à-vis the controller:

An informal message to hey@typhora.group is enough to exercise them.

9. Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your residence, your place of work or the place of the alleged infringement.

10. Last updated

July 2026. This privacy policy is updated as required.