AN OPEN EXPERIMENT Built in public. Still evolving.
Mario and AikMario & Aik Lab

PRIVACY BY DESIGN

Less data.
More clarity.

What happens when you visit the lab, and how to contact us.

1. Who is responsible

Mario V.W.B.R. Obst is the operator and controller for the processing described here. He lives in Erfurt, Germany. The following address is used for service and correspondence:

Mario V.W.B.R. Obst
c/o JL Consulting Group GmbH
Zürcherstrasse 84 #1623
8852 Altendorf
Switzerland

Email: legal@marioobst.com
Phone: +49 175 7116303

2. What this website collects

This notice covers mario-aik.space, our project directory and public development journal. Our page code contains no advertising, visitor analytics, accounts, contact forms or embedded third-party content. It sets no application cookies and uses no local storage. Images and styles are delivered from this site; fonts come from your device. We do not build visitor profiles or make automated decisions about visitors.

These statements describe our website code. They do not mean that delivering a website involves no personal data. Hosting and correspondence are explained below.

3. Cloudflare hosting and security

The lab is delivered through Cloudflare Workers with static assets over HTTPS. Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, processes connection and request information such as IP address, time, requested URL and browser-supplied information to deliver the site and protect it against attacks. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in operating a reliable and secure website.

Our deployment configuration disables Workers application observability. That does not disable all provider-side processing or security logs. The public homepage inspected on 14 October 2026 contained no analytics scripts; its inspected response set no cookie. This single check does not establish that every request or security challenge will be cookie-free. Cloudflare Web Analytics / Real User Monitoring (RUM) is fully disabled for mario-aik.space. On 14 October 2026, we selected “Disable completely” in the domain’s dashboard and Cloudflare confirmed that RUM is disabled for this zone. This disables browser-based performance measurement; it does not disable the technical hosting, security processing or network-error reporting described here.

The live responses contain Cloudflare Network Error Logging (NEL) headers. Browsers supporting this feature may send technical network-error reports to Cloudflare. This diagnostic processing is separate from analytics scripts in our pages.

Cloudflare may process information outside the European Economic Area. Its published terms explain the transfer mechanisms applicable to its services, including the EU-US Data Privacy Framework and standard contractual clauses. Provider-side retention depends on the service, purpose and account configuration; we do not promise a single retention period or EU-only processing. See the Cloudflare Data Processing Addendum and Cloudflare Privacy Policy.

Search discovery: Crawler Hints and IndexNow

On 15 October 2026, Mario enabled Cloudflare Crawler Hints for this domain. Cloudflare uses cache signals to notify participating search engines through IndexNow when public content may have changed. Website information needed for this feature is shared with those services. The purpose is helping search engines discover current public content, based on our legitimate interest in making the website findable under Article 6(1)(f) GDPR. This adds no visitor analytics script to our pages. It is separate from our own search collection and does not guarantee indexing.

See Cloudflare’s Crawler Hints documentation and the supplementary terms.

4. Email and telephone

If you contact Mario, he processes the contact details, message and associated information needed to respond. This is based on Article 6(1)(f) GDPR and the legitimate interest in answering correspondence; Article 6(1)(b) may apply to contract-related enquiries. Providing information is voluntary. Without suitable contact details, a reply may not be possible.

Correspondence is deleted when the matter is resolved and the information is no longer needed, unless legal retention duties or the protection of legal claims require further storage.

The email address legal@marioobst.com uses Apple’s iCloud+ service. Apple processes messages and transmission information to provide email. The iCloud contracting entity for Germany is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Apple describes international processing and safeguards in its Privacy Policy and iCloud terms for Germany. Mario’s deletion criteria do not promise immediate deletion of every technical copy held by Apple.

5. Postal correspondence

JL Consulting Group GmbH receives mail at Mario’s correspondence address in Switzerland. Mario chooses whether it is forwarded digitally or physically. Necessary sender, recipient and shipment details are processed, along with the contents for digital forwarding. The purpose is receiving and handling correspondence, generally under Article 6(1)(f) GDPR.

Paper letters are destroyed after digitisation. Mario keeps digital copies only as long as needed to handle the matter or meet legal retention obligations. Copies remaining with the address service are deleted when the matter is closed or on his instruction. See the address service’s privacy information.

6. Project links and AI assistance

Project cards are ordinary external links without click tracking. They open the linked website when you follow them; the destination operator’s privacy information then applies. Our no-referrer policy suppresses the referring page address.

Aik helps create the site’s text, design and code. Reading the lab does not send your input to an embedded AI assistant: the site has no AI chat or visitor-input form. Public development notes are edited accounts of our work, not raw private conversations.

7. The search pilot

A limited search pilot is now available at search.mario-aik.space. Its processing is described in the search privacy notice. Search phrases are processed by Cloudflare Workers AI and Vectorize, but are not saved in our application database or personal search histories. This project directory itself has no search form. The search website accepts URL suggestions; reading starts only after Mario’s approval.

8. Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. If processing relies on consent, you may withdraw it for the future.

Right to object: you may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. Contact legal@marioobst.com.

You may complain to a data-protection supervisory authority, particularly where you live, work or believe an infringement occurred. In Thuringia, this is the Thuringian Commissioner for Data Protection and Freedom of Information (TLfDI).