Privacy Policy

Last updated: November 2026

1. Who is responsible?

The controller responsible for data processing on this website is its operator, the artist SHYNOX. You can reach us at any time at [email protected], including for all questions about data protection and your rights.

2. Providing the website (Cloudflare)

To display this website, your browser has to send technical data to the server – in particular your IP address, the requested address, date and time, your browser identification (user agent) and, where applicable, the page you came from.

Our website is delivered through Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare processes this data as our processor to deliver the site quickly and to protect it against attacks and abuse. A small protective component at Cloudflare checks requests for unknown addresses so that internal files cannot be retrieved. We do not receive or store IP addresses ourselves.

The legal basis is our legitimate interest in a secure, stable and fast website (Art. 6(1)(f) GDPR). Cloudflare may also process data in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework; the European Commission’s standard contractual clauses apply in addition. Cloudflare keeps this data only as long as necessary for these purposes. You can find more in Cloudflare’s privacy policy.

3. Counting page views (without consent)

We would like to know which language versions of our website are used. For this, Cloudflare counts how often each language version is opened per day.

Only a daily counter per language version is stored, for example “12 Nov 2026 – /de/ – 41 views”. Single requests, times of day, your IP address, browser identification, device, the page you came from and any identifier are not stored. Nothing is stored on or read from your device, and no additional script is loaded for this. So that automated requests (such as search engines or our availability check) do not distort the figures, they are filtered out using the browser identification, which is not stored.

The daily counters do not allow any conclusions about individual people. The legal basis for the brief technical processing when the page is opened is our legitimate interest in improving our website in the languages people use (Art. 6(1)(f) GDPR). The counters are kept in a database at Cloudflare that only we can access through our Cloudflare account. They cannot be retrieved through the website. They are deleted automatically after 400 days (about 13 months).

4. Optional analytics (only with your consent)

If you choose “Accept all” in the notice or switch on “Optional analytics” in the settings, we additionally collect anonymous statistics to improve the website in a targeted way – for example for smartphones or for the most used platforms. We record:

• which platform links are opened (for example Spotify or YouTube) and whether the contact options are used,
• which parts of the page are reached (such as “About” or “Connect”) and whether the language is changed,
• the device type (smartphone, tablet or computer), a rough screen size class and the orientation,
• the country the visit comes from – Cloudflare derives it from the IP address, the IP address itself is not stored,
• the website you came from, as a domain only (for example “instagram.com”), and whether the page was opened inside an app such as TikTok or Instagram,
• whether you visited the website on an earlier day (yes or no).

We use no cookies, no identifier, no fingerprinting and no third-party services for this. The information is sent through our own website to Cloudflare. There, each item is immediately added to its own daily counter (for example “smartphone: +1” or “Austria: +1”). Single visits, times of day and combinations of the items are not stored, so the counters do not show which items belong to the same visit. The counters are deleted automatically after 400 days (about 13 months). The information is not combined with other data, and there is no profiling or advertising.

The legal basis is your consent (Art. 6(1)(a) GDPR and § 165(3) of the Austrian Telecommunications Act 2021). Consent is voluntary. If you decline, the website works exactly the same. You can withdraw your consent at any time with effect for the future, at the bottom of this page under “Your choice”.

5. Cookies and tracking

This website sets no cookies. There are no advertising trackers, no social media plugins, no embedded videos, no external fonts and no fingerprinting. If you decline, none of this is added secretly.

In your browser’s local storage we keep at most two small entries:

• “shynox-consent” – stores your choice (yes or no), the version of the notice and the month of your choice. This entry is necessary so that we respect your choice and do not ask you again on every visit. It contains no identifier. After twelve months we ask you again.
• “shynox-visit” – only if you agreed to optional analytics: the date of your last visit, so that we can count how many visits are returning visits. It contains no identifier and is deleted immediately when you withdraw your consent.

You can delete both entries at any time by clearing this website’s data in your browser.

6. Contact by email

If you write to [email protected], we process your email address, your name (if given) and the content of your message in order to reply. The legal basis is handling your request (Art. 6(1)(b) GDPR where it concerns a collaboration, otherwise Art. 6(1)(f) GDPR). Our mailbox is provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); Google may also process data in the USA and is certified under the EU-U.S. Data Privacy Framework. We keep your message only as long as needed to handle it and then delete it, unless legal retention obligations apply.

The “Copy email” button only copies the address to your device’s clipboard. Nothing is transmitted.

7. Links to music platforms and support

Our links to YouTube, TikTok, Instagram, Spotify, YouTube Music, Apple Music, Amazon Music and PayPal are plain links. As long as you do not open them, no data is transferred to these services. Only when you open a link do you leave our website; from then on, the privacy policy of that platform applies. The links are set up so that the platform does not learn which page you came from. If you agreed to optional analytics, we only count which platform was opened.

8. Availability and error monitoring (Sentry)

We use Sentry (Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA) to notice outages quickly. Sentry’s servers regularly request our home page for this; no visitor data is processed. If a technical error occurs in the protective component at Cloudflare, we receive a short error report with the requested address (without parameters) and technical details of the error – without IP address, browser identification, cookies or any other information about you. Sentry stores these error reports in the EU (Frankfurt). Your browser never contacts Sentry. The legal basis is our legitimate interest in a working website (Art. 6(1)(f) GDPR). Sentry is certified under the EU-U.S. Data Privacy Framework.

9. Recipients and transfers to third countries

We do not pass your data on to third parties and we do not sell it. The only recipients are the service providers named above: Cloudflare (delivery, page view counting, optional analytics) and Sentry (availability and error monitoring), acting on our behalf, and Google as the provider of our email mailbox. Where they process data in the USA, we rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework and, in addition, on standard contractual clauses.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Just send us an email.

Please note: for the daily counters we cannot attribute data to a particular person, because we store neither single visits nor identifiers.

If you believe we are not handling your data properly, you can lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, Austria, www.dsb.gv.at) or with the data protection authority of the country where you live.

11. No automated decisions

We make no automated decisions and create no profiles. You are not obliged by law or contract to provide data to us; without the technically necessary connection data, however, the website cannot be displayed.

12. Changes to this privacy policy

If our website or the services we use change, we will update this privacy policy. The current version is always available here. If the optional analytics change significantly, we will ask for your consent again.

Your choice

You haven’t made a choice yet – optional analytics are off.

DeclineAccept all

Change settings

Back to the website