Legal

Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Black Oar Studio LLC
1209 Mountain Road Pl NE, Ste N
Albuquerque, NM 87110, USA
E-Mail: privacy@blackoarstudio.com

Note: The controller is based in the USA. Personal data may therefore be processed in the USA (third-country transfer within the meaning of the GDPR).

2. Hosting

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the website, Cloudflare processes technically necessary server log data (e.g. IP address, date and time of access, page accessed, browser type) to provide the website securely and reliably. The legal basis is our legitimate interest in reliable operation (Art. 6(1)(f) GDPR). Processing takes place in the USA. More information: cloudflare.com/privacypolicy

3. Cookies & Local Storage

This website only uses technically necessary data in your browser's local and session storage:

— ll-lang: Your chosen language (DE/EN/TH/RU)
— loaf-cart: Demo shop cart contents
— ll-sound / ll-sound-pos: Your sound preference (on/off) and the playback position — in session storage, deleted when you close the tab
— ll-cookies: Your cookie setting

This data is stored exclusively in your browser and is not transmitted to our servers.

4. Analytics & Advertising

This website currently does not use any analytics tools, tracking pixels, or advertising services. No data is transmitted to third parties such as Google Analytics, Facebook Pixel, or similar services.

5. Contact

This website includes a contact form. In it you provide your name, your email address and your message. In addition we process the country code that Cloudflare derives from your IP address, so that we know which time zone we are replying into; we do not store the IP address itself. All of this is used solely to answer you. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in replying), or Art. 6(1)(b) GDPR where the correspondence concerns a contract or its negotiation. You are equally welcome to write directly to the email address shown in the footer and in the Legal Notice instead.

How a form message travels. A message sent through the form is received by a Cloudflare Worker on our own domain and handed to Resend (USA), our sending provider, which processes the content in order to deliver it to our mailbox. Resend acts as our processor and is a US company; the transfer relies on the European Commission’s Standard Contractual Clauses and, where applicable, on certification under the EU-US Data Privacy Framework. How long Resend keeps its delivery log is not determined by us.

Recipients. Mail addressed to our domain reaches us in two stages. Cloudflare Email Routing (Cloudflare, Inc., USA) accepts it and forwards it to our mailbox; it does not keep the message itself, but it does record delivery metadata (sender, recipient, timestamp, outcome). The mailbox is Gmail (Google LLC, USA) — that is where the message is stored. Both act as our processors. Processing therefore also takes place in the USA; transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, on certification under the EU-US Data Privacy Framework.

Retention. Enquiries that lead nowhere are deleted within twelve months. Correspondence belonging to a project is kept for the life of the engagement and afterwards for as long as commercial and tax record-keeping obligations require.

To exercise the rights described in section 6: privacy@blackoarstudio.com

6. Your Rights

You have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing (Art. 15 GDPR), as well as the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and objection to processing (Art. 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

7. Notice

This website serves as a live demo for the Loaf & Link template system. The demo shop does not process real orders and does not collect payment data. All displayed products and prices are sample data.

Last updated: July 2026