Privacy policy

Last updated: October 2026. If the German and English versions differ, the German version applies.

Notchwerk is built to collect as little data as possible: there are no user accounts, no cookies, no ads and no cross-site tracking. Wallpapers are created in your browser. This page explains which data is still processed and why.

1. Controller

Allaa El-Khodr
Schillstr. 6
38102 Braunschweig
Germany
Email: allaa@mindbridge-solutions.de

2. Hosting and server logs

The website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Each time a page is requested, Vercel processes technical data your browser sends automatically:

  • IP address
  • date and time of the request
  • requested page or file
  • referrer (the previous page, if sent)
  • browser type and version, operating system

This data is needed to deliver the website and to protect it against attacks and abuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website. Vercel keeps log data only as long as needed for these purposes and then deletes or anonymizes it.

Vercel processes the data on our behalf under a data processing agreement (Art. 28 GDPR). Data may be transferred to the USA. Vercel is certified under the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR). More information: Vercel privacy notice.

3. Wallpaper generator

PNG download: the image is created entirely in your browser. Neither your text nor your colors are sent to us.

.heic download (Mac): your browser first creates the light and the dark image. Both are sent to our server function at Vercel, packed into one .heic file and sent straight back to you. The images are processed in memory only and are not stored. They contain only your design, including the text you entered, so please do not enter confidential information. The legal basis is Art. 6(1)(b) GDPR, as the processing is needed to create the file you requested.

4. Local storage in your browser

So you can continue where you left off, the generator saves your settings (template, device, text and colors) in your browser's local storage. This data stays on your device and is not sent to us. The legal basis is § 25(2) no. 2 TDDDG, as the storage is required for the function you are using. You can delete it at any time by clearing the site data for this website in your browser.

5. Audience measurement without cookies

To see how many people use the website and which pages are popular, we use Vercel Web Analytics from our host Vercel. It sets no cookies and stores nothing on your device. For each page view it records the time, the page, the referrer, country and region, operating system, browser and device type. To count visits, Vercel creates a hash from properties of the request. The hash is discarded after 24 hours and cannot recognize you beyond that period or on other websites. We only see aggregated statistics, never individual people.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is measuring the reach of the website and improving its content. You can object to this processing (see section 8) or block it with a content blocker in your browser. More information: Vercel Web Analytics privacy.

Apart from this we use no analytics, tracking or advertising services. Fonts and all other files are loaded from our own server; no third-party content such as Google Fonts is embedded.

6. Contact by email

If you email us, we process your email address and the content of your message to answer your request. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR for requests related to a contract. The data is deleted once your request has been handled, unless statutory retention obligations apply.

The website links to other services, for example Apple or Vercel. Simply displaying a link does not send any data to these providers. Their privacy policies apply once you click a link.

8. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where processing is based on Art. 6(1)(f) GDPR, you may object to it on grounds relating to your particular situation (Art. 21). An email to the address above is enough.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

9. Obligation to provide data, automated decisions

You are not obliged to provide personal data. Without the technically required connection data, however, the website cannot be delivered. There is no automated decision-making or profiling.

10. Changes

We update this privacy policy when the website or the legal situation changes. The version published here applies.