Privacy Notice

Controller and scope

Solovei Kyrylo
ninepeaks
Rue de la Croix-Federale 27
2300 La Chaux-de-Fonds
Switzerland
dwzzd@icloud.com

This notice applies to the ninepeaks portfolio at ninepeaks.dev, ru.ninepeaks.dev and their portfolio pages. It covers visits, direct contact and existing support conversations. Cluster has a separate Privacy Notice for its accounts and service data.

Visits and technical data

The web server processes data needed to deliver pages and maintain security. This can include the IP address, request time, requested address, response status, browser information and referring page when supplied by the browser. Such data may be recorded in access or error logs.

The portfolio does not use advertising trackers, third-party analytics, embedded social feeds or externally loaded fonts. The background animation, clock and technology descriptions run locally in the browser.

Contact and existing support conversations

There is no contact submission form on the portfolio. If you contact the operator by email or another linked service, the information you choose to send is processed to answer the enquiry and maintain the related correspondence. Please avoid sending passwords, authorization codes or information unrelated to the request.

Previously created support conversations may remain accessible through their private ticket links. These records can contain the supplied name or handle, reply email, messages, attachments and associated technical records. A ticket link grants access to that conversation and should be kept private. New conversation creation through the former public form is disabled.

Purposes and legal grounds

Data are processed to provide the website, handle enquiries and agreed work, maintain existing correspondence, prevent misuse and meet applicable obligations. Processing is limited to these purposes. Personal data are not sold or used to build advertising profiles.

Processing is subject to the Swiss Federal Act on Data Protection. Where another law requires a specific legal basis, the relevant basis may be steps requested before a contract, performance of a contract, a legal obligation, legitimate interests in security and correspondence, or consent where required. Visiting the website does not constitute blanket consent to unrelated processing.

Providers and international processing

The website and existing ticket records are hosted on the operator’s Netcup server in Germany. Cloudflare provides DNS and, where enabled, proxy and security services; Cloudflare, Inc. is based in the United States and operates an international network.

Email correspondence sent to dwzzd@icloud.com is handled through Apple iCloud Mail. The existing ticket system also uses Brevo, based in France, for email functions when those functions are active. These providers receive the contact, message or technical data needed for the relevant function. Recipients of an email and their own providers also process that email.

Processing outside Switzerland can therefore involve Germany, France and the United States, including providers and infrastructure described above. Applicable safeguards are required where the destination does not provide an adequate level of protection. Provider information is available in the Cloudflare, Apple and Brevo privacy notices.

Cookies and browser storage

The portfolio pages do not set an application login or analytics cookie. The existing ticket interface requests the functional np_csrf cookie to protect replies against cross-site request forgery. Its configured lifetime is one hour. Blocking cookies can prevent ticket replies.

Cloudflare may use necessary security cookies where its protection features are applied. Cookie use by an external service after following a link is governed by that service. Browser cookie controls can be used to inspect or delete cookies.

Retention and deletion

Website logs are configured for daily rotation with fourteen rotated files retained. Limited records can be retained longer where needed to investigate an incident or comply with a legal requirement.

Messages and existing ticket records are retained while needed for correspondence, agreed work, applicable record-keeping duties or the establishment or defence of a claim. Existing conversations remain subject to the previously stated limit of twenty-four months after closure, unless earlier deletion is requested or longer retention is legally required. This limit is administered by the operator; removing the form does not extend it. You may request deletion using the contact address.

Deletion from a working system may not remove every backup immediately. Any retained backup or legally required copy remains subject to its retention purpose and access restrictions.

Your rights

Subject to applicable law, you may request access to personal data, a copy, correction, deletion, restriction or portability, or object to processing where such a right applies. Consent may be withdrawn for future processing without affecting the lawfulness of prior processing.

Send requests to dwzzd@icloud.com. Identify the relevant enquiry or conversation without publishing its private ticket link. A proportionate identity check may be required. You may also contact the Swiss Federal Data Protection and Information Commissioner or another competent authority.

Security and automated decisions

Public pages and support links use HTTPS. Access to ticket administration is restricted; ticket replies use CSRF protection and rate limits. Reasonable technical measures are used, but no online system guarantees absolute security. Please report a suspected exposure directly to the operator.

The portfolio does not carry out profiling or automated decisions that produce legal or similarly significant effects.

Changes and contact

This notice may be updated when website functions, providers or processing practices change. The date above identifies the current version. Questions about the notice can be sent to the controller at the email or postal address stated above.