Privacy

1. Controller

Emma Pulbrook, The Architect Lab, Solmsstraße 10, 10961 Berlin, Deutschland, [ORDERS@DOMAIN].

2. The evidence list (waitlist)

If you join the evidence list we store your email address, the time of your consent, the city and country you give us, a case number (e.g. FC-1984-00428 — an internal reference, nothing more), an optional embroidery preference, the piece you asked about (e.g. FC-03), the link you arrived from (a short code, e.g. tt-0001), a one-way hash of your IP address and browser string (spam protection, not identification), and the page you joined from. Legal basis: your consent (Art. 6 (1) a GDPR). Purpose: to write to you about Drop 001 — when preorders open and when they close — and nothing else. Storage: until you leave the list or the drop is dispatched plus 30 days. Withdraw any time using the link at the foot of any message, or by writing to [ORDERS@DOMAIN]; the Ministry removes you without argument.

City and country. We ask for these so we know where the edition would have to be posted, and how many of each piece to have made for a region. They are used as counts by country and city; no street address is collected until you place an order. Your browser is never asked for its GPS location. Where you leave the fields blank — for example a signup queued on your device before the fields existed — we record the country the hosting network already sees on the request (an approximate, IP-derived country and city, stored separately and marked as such) so the count is not silently wrong. Nothing here identifies you beyond the address you gave us.

The delay is deliberate. The first message is handed to our mail provider at once but scheduled for delivery between 11 and 47 minutes later. Nothing is being computed about you in the meantime; an instant automated reply to a form is the behaviour this project exists to criticise, so we do not perform one. The scheduled time is stored against your row.

Double opt-in. After you join we send one message asking you to confirm the address. Until you confirm, the entry receives nothing further; if you never confirm, no campaign message is ever sent to it. We record which of the five Drop 001 messages have been sent to your address, and whether the send succeeded, so that you are never written to twice. We do not track whether you opened a message or which links you clicked in it.

3. Orders

Payments are processed by Stripe Payments Europe, Ltd. (Ireland). Stripe receives the data needed to take payment and collect a shipping address; see stripe.com/privacy. We store your order (items, amount, email, shipping address, Stripe reference) to fulfil the contract (Art. 6 (1) b GDPR) and for as long as commercial and tax law require (§ 147 AO, § 257 HGB: 6–10 years). Your address is passed to the carrier for delivery.

4. Tracked links

Links of the form /go/… in our social posts count clicks per post and per piece (aggregate only), storing a one-way hash of IP and browser string. Legal basis: legitimate interest in knowing which posts work (Art. 6 (1) f GDPR). No profile is built; the hash cannot be reversed.

5. Hosting and processors

The site is hosted by Vercel Inc. (USA; EU-region edge, standard contractual clauses); the database by Supabase (project region: EU, Frankfurt). Server logs (IP, request, time) are kept by the host for security for a short period. Campaign and confirmation email is sent through [EMAIL PROVIDER — Resend, Inc., with a data-processing agreement, once the account is opened], which receives your email address, the message itself, and the time it is to be delivered. Messages come from FACECRIME // EVIDENCE DESK, evidence@facecrime.store.

6. Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent — write to [ORDERS@DOMAIN]. You may complain to a supervisory authority; for Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit.

7. Cookies, local storage and analytics

No analytics, no tracking cookies. The site loads no Google Tag Manager, no Google Analytics and no other third-party measurement script, and it sets no cookies of its own.

To work, the site keeps a few entries in your browser's local storage. They stay on your device and are not sent to us unless you check out or join the list: your bag (facecrime.bag.v2), a launch hold link if you have one (facecrime.hold.v1), and a waitlist signup waiting to be sent if you were offline (facecrime.evidence.queue.v1). These are strictly necessary for the service you asked for (§ 25 (2) TTDDG). Clear them at any time in your browser's site settings.

Our host keeps standard server logs for security, as described in section 5. Payment pages are run by Stripe under Stripe's own privacy policy.