Privacy

This site counts how often its pages are opened, and sets one cookie for that which expires after thirty minutes. Nothing beyond that: no recognising you across other sites, no advertising network, no sign-up form and nothing for sale. What else cannot be avoided is what your browser sends to the server when it asks for a page — more on that below.

Two things have come with the site being editable by its owner: pictures added through the editing area are served by Supabase, and that editing area keeps a session in the browser of whoever signs in. Both are described below.

Balazs Abraham, Szamaránszky dűlő, 195716/1 HRS., 1239 Budapest, Hungary.

Email: freeragnaroek@gmail.com

When you open a page your browser sends the server what it technically needs: the address requested, the date and time, the amount of data transferred, the referrer you came from, your browser and operating system, and your IP address. Without these the page could not be delivered.

The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest is running the site correctly and securely.

The site is hosted with Lovable Labs Sweden AB, Regeringsgatan 25, 111 53 Stockholm, Sweden. A data processing agreement under Art. 28 GDPR is in place. The list of sub-processors it uses, with their locations, is published at trust.lovable.dev.

The provider states no fixed deletion period for server logs. By its own account they are kept for as long as running and securing the service requires, and longer while an incident is being investigated.

The host measures how the site is used, with a script of its own. Each time a page is opened it sends: the address requested, the referrer you came from, your browser's identifier and language setting, and your country. From these come the reports — visits, page views, how long a visit lasted, where visits came from, the most-read pages and the kind of device. The country is derived from your browser's time zone, not from your IP address.

For this the script sets a cookie named "session-id". It holds a random string with no connection to you as a person and expires after thirty minutes. According to the provider no profiles are built from it and visitors are not recognised across separate visits.

The legal basis for the processing is Art. 6 (1) (f) GDPR, and the legitimate interest is knowing which parts of this site are read. To say it plainly: the cookie is set without asking you first, and it is not required for the site to work. The measurement can be switched off at any time — if you would like that, write to the address given above.

The fonts on this site are served from its own server. No connection to Google or any other provider is opened for them, and your IP address is passed to nobody. The same goes for every picture in the visual story.

There is one exception: pictures added through the editing area, for a film, an article or a lecture, are stored in Lovable Cloud, the database and storage service of the host (Lovable Labs Sweden AB, see above), and loaded from there. Lovable uses Supabase Inc. as a sub-processor for this, in a data centre in Ireland, which means Lovable and Supabase see your IP address. The legal basis is Art. 6 (1) (f) GDPR and the legitimate interest is delivering the content of the page. The data processing agreement under Art. 28 GDPR is with Lovable.

At /studio there is a password-protected area in which the owner of this site changes its content. It is not meant for visitors and is in no search index.

Anyone signing in there leaves two things: the credentials of their account with Supabase, and a session in their own browser so that the sign-in does not have to be repeated on every page. Both concern signed-in editors only, never a visitor. Signing out deletes the session.

The films live on YouTube and this site links to them. These are plain links, not embedded players: as long as you do not click, YouTube learns nothing of your visit. Once you follow one, Google's privacy policy applies.

You have the right to information about the data held about you (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), and to object to processing based on a legitimate interest (Art. 21).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), either where you live or where the controller is based — in Hungary the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH).

If anything changes on this site that matters for data protection — an embedded player, a map, a sign-up form — this statement is changed on the same day.