Short, because there’s
little to disclose.

Who is responsible

CREATEWITHLOGIC LLC, 8206 Louisiana Blvd NE, Ste A #9336, Albuquerque, NM 87113, USA (owner: Tim Muenzel) is the controller for any personal data processed through this website. Contact: tim@createwithlogic.com.

The contact form

If you request a systems teardown, your browser sends the data you entered (name, email, optionally company and your message) directly over TLS to a database hosted by Supabase (our processor for this single purpose). A row-level-security policy allows exactly one operation from the public internet: inserting your request. Nothing can be read back out. I use your data solely to prepare and send you the teardown you asked for, on the legal basis of taking steps you requested prior to a contract (GDPR Art. 6(1)(b)). No newsletter, no automated follow-up sequence.

If you used the leak calculator first, its result is held purely functionally in your browser’s session storage (cleared when you close the tab) and attached to your request and it only leaves your browser when you submit. On arrival, the database triggers an internal notification email to us, sent via the processor Resend and containing your details so a human can reply promptly.

Hosting

The site is served as static files by Vercel. Like any web server, Vercel processes technical connection data (IP address, request time) to deliver the pages and keep the platform secure. This site adds no logging of its own on top.

Advertising measurement (Meta pixel)

To measure our ad campaigns we use the Meta pixel (Meta Platforms Ireland Ltd. / Meta Platforms, Inc.). An upstream service reads your country once from your IP address (functional cookie cwl_geo, country code only):

• Visitors in the EU/EEA, UK and Switzerland: the pixel is not loaded unless you explicitly agree. Only when you click “Accept” in the cookie banner is it loaded, sending page views and contact-form submissions (as a conversion) to Meta. Data such as a hashed email address may be sent for matching. The legal basis is your consent (GDPR Art. 6(1)(a)). Decline and none of this happens.
• Visitors outside this region (e.g. the US): the pixel loads directly; for these visitors outside the EU the GDPR does not apply.

A “Do Not Track” signal in your browser is respected and disables the pixel entirely. Meta may also process the collected data for its own purposes; for EU visitors this happens only on the basis of your consent.

You can withdraw your consent at any time, with future effect, as easily as you gave it:

Our own cookieless measurement

We measure how our pages are used ourselves, with our own setup rather than a service such as Google Analytics. No cookies are set and nothing is stored in your browser. A random identifier exists in memory for the duration of a single page view and is then gone, so recognising you across pages or visits is not possible.

We collect only: the page requested, the referring page, campaign parameters from the address, device category (mobile, tablet, desktop), browser language, window width, and the country code derived from your IP address. The IP address itself is not stored; it is converted to a country code on arrival. No profiles are created.

The legal basis is our legitimate interest in privacy-preserving measurement (Art. 6(1)(f) GDPR). Because no information is accessed on your device, no consent is required. Stored in our Supabase database (EU region), deleted after 12 months.

Cookies and local storage

For the advertising measurement above we set at most two functional cookies:

• cwl_geo: contains only your country code (e.g. “DE”), 24-hour lifetime; used solely to decide whether consent is needed at all.
• cwl_consent: stores your banner choice (accept or decline), 6-month lifetime, so we don’t ask you again.

Only after you accept does the Meta pixel set additional cookies (e.g. _fbp). Separately, the leak calculator may keep its result purely functionally in your browser’s session storage, which is cleared when you close the tab. We set no analytics, statistics or other tracking cookies.

International transfers

The controller and the processors used (Vercel, Supabase, Resend, and Meta for visitors outside the EU) are based in the US; processing takes place on the basis of appropriate safeguards (EU Standard Contractual Clauses or the processors’ certification under the EU-U.S. Data Privacy Framework).

Retention and your rights

Teardown requests are kept as long as needed to handle your inquiry and a potential engagement, then deleted. You can at any time request access, correction, or deletion of your data, object to processing, or request a copy, and withdraw any consent you gave: one email to tim@createwithlogic.com is enough, and a human (me) handles it. If you are in the EU/EEA you also have the right to complain to your local data-protection authority.