Privacy Policy

Last updated: June 2026

We take the protection of your data seriously. This statement tells you briefly and honestly which personal data we process when operating ArtifAIry.ai, for what purpose and on what legal basis. No bullshit: we only name what actually happens.

What this is about

ArtifAIry.ai is a private, non-commercial project — a curated gallery for AI art and a funnel to our Instagram account @artifairy.ai. Free, nothing for sale. We process personal data in line with the GDPR, the German BDSG and TDDDG, following the principle of data minimisation.

“Personal data” is any information relating to an identifiable person (e.g. name, email address). The “controller” is whoever decides on the purposes and means of processing — here, that is Ronny Glotzbach.

Controller

Responsible for the data processing on this website is:

  • Ronny Glotzbach
  • Hermann-Pflaume-Str. 16
  • 50933 Köln
  • Germany
  • Email: hello [at] artifairy.ai

Hosting & server logs

The website runs on a server at DigitalOcean (data centre Frankfurt, Germany). When you access the site, technically necessary connection data is processed (e.g. IP address, time, requested resource). The legal basis is our legitimate interest in secure, stable operation (Art. 6 (1) (f) GDPR).

Submitting artworks

When you submit a work, we process the data you provide: artist name or Instagram handle (as the public credit), your contact email (only for notification, never public), optional links, details about the AI tool used, and the uploaded image.

  • Uploaded images are re-encoded on the server; embedded metadata (EXIF, e.g. GPS location) is stripped in the process.
  • Files get random names and are stored without any personal reference.
  • We deliberately do NOT store an IP address with a submission.
  • We use your contact email solely to send you a receipt confirmation and, if applicable, a “you’re featured” message.

The legal basis is carrying out the publication you requested and/or your consent (Art. 6 (1) (a) and (b) GDPR). By submitting, you confirm that you hold the necessary rights to the work and permit us to display it on the website and on @artifairy.ai with credit. This consent is logged with a timestamp and version.

Email delivery (Brevo)

For transactional emails (receipt confirmation, “you’re featured”) we use the service brevo.com (Sendinblue GmbH). Your email address is transmitted to Brevo solely to send these messages — no newsletter, no marketing. A data processing agreement is in place with Brevo. Legal basis: Art. 6 (1) (b) and (f) GDPR.

Spam protection (Cloudflare Turnstile)

The submission form is protected by Cloudflare Turnstile to fend off spam and automated submissions. In doing so, Cloudflare processes technical data (including the IP address) for bot detection. Turnstile sets no advertising cookies. The legal basis is our legitimate interest in abuse-free operation (Art. 6 (1) (f) GDPR).

Fonts (self-hosted)

We host all fonts ourselves on our server. NO Google Fonts or other external font services are loaded — so visiting the site establishes no connection to third parties for loading fonts.

Cookies

In the public area we set no tracking or marketing cookies. At most there is a technical cookie for the language choice (DE/EN). The internal admin area uses a single, technically necessary session cookie for login — this only concerns the operator, not regular visitors.

No tracking / analytics tools

We use no Google Analytics or comparable tracking services. There is no profiling and no re-targeting.

Retention

Published works and their credit remain stored for as long as they are part of the gallery. Rejected submissions and their images are deleted. You can request the deletion of your submission at any time (see “Your rights”).

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent at any time. To exercise these, simply contact hello [at] artifairy.ai.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (www.ldi.nrw.de).