Privacy Notice

1. Controller

The controller responsible for the processing described in this Privacy Notice is Domenic Rau, Heinestr. 20 / 6, 75236 Kämpfelbach, Germany.

Privacy and legal contact: legal@varyanz.app

2. Scope

This Privacy Notice applies to the Varyanz website, the self-contained Varyanz Android app, feedback forms, bug reports, feature requests, and general, privacy, or legal enquiries sent by email.

Varyanz does not provide user accounts and does not require registration or login.

3. Selected media and local processing

Varyanz allows you to select and compare media such as images, videos, GIFs, HDR or HDRI files, SVG files, and 3D files.

The files you select are processed locally on your device. They are handled temporarily through your device memory and the Varyanz application process so that they can be displayed and compared.

Selected files are not uploaded to a Varyanz server. We do not receive, store, analyse, or share the contents of the files you compare.

External resource references in imported glTF files are not loaded. Imported SVG files are sanitised locally before display to remove scripts, embedded active content, event handlers, and non-local resource references.

Varyanz only sees the individual files that you deliberately select using the browser or Android system file picker. It cannot freely inspect other files stored on your device and does not scan your device storage.

Your browser, Android operating system, or device may independently create temporary files, memory entries, thumbnails, or cached representations as part of its normal technical operation. These are controlled by your browser, operating system, or device.

4. Self-contained Android app

The Varyanz Android app is self-contained. The app does not need to download application code or upload selected media to a Varyanz server in order to display or compare files.

During ordinary comparison use, the Android app does not transmit your selected files or comparison activity to us.

A network connection may be used when you deliberately load example media, submit feedback, a bug report, or a feature request, send an email, or open an external link.

5. Saved preferences and cookies

Varyanz does not save your preferences automatically.

When you deliberately select the “Save preferences” function, Varyanz stores a small preference cookie or equivalent local preference value on your device. This may remember settings such as dark mode, light mode, interface preferences, or similar application settings.

The saved preference contains the selected setting. It is not used to identify you, follow your activity across websites or apps, build a profile, measure advertising, or perform analytics.

The storage is used only to provide the preference-saving function that you expressly request. Insofar as Section 25 of the German Telecommunications Digital Services Data Protection Act applies, the storage is based on Section 25(2)(2) because it is used to provide the expressly requested preference-saving function. Where a saved preference constitutes personal data, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is providing the persistent settings requested by the user.

The saved preference remains on your device until it is overwritten, removed by your browser or operating system, deleted when you clear the website or app data, or removed when you uninstall the Android app. A browser may also remove it according to its own storage and expiry rules.

If you do not use “Save preferences,” Varyanz does not create this persistent preference storage.

6. Analytics, advertising, and tracking

Varyanz currently does not use analytics services, advertising networks, behavioural tracking, cross-site tracking, cross-app tracking, marketing pixels, user profiling, or third-party error-tracking services.

Varyanz does not sell personal data and does not share personal data with advertising networks or data brokers.

No cookies are used for advertising, analytics, or tracking. The only Varyanz preference storage described above is created when you deliberately choose to save your preferences.

7. Website hosting and technical access data

The Varyanz domain and website are hosted through Porkbun LLC in the United States.

When you visit the Varyanz website or submit information to the Varyanz hosting environment, Porkbun and technical service providers acting on its behalf may process technical connection data required to deliver and secure the service. Processing may occur outside the European Economic Area.

This technical data may include your IP address, the date and time of the request, the requested page or resource, the request method, response status, browser information, operating-system information, referring URL, and other technical connection or diagnostic data.

The purpose of this processing is to deliver the website, establish the technical connection, maintain system security, prevent abuse, diagnose technical problems, and ensure reliable operation.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are providing a secure and functional website, maintaining technical security, preventing misuse, and investigating technical errors.

We do not use hosting access data for advertising, behavioural analytics, or user profiling.

Some operational logs are controlled by the hosting environment. They are retained according to the hosting provider’s operational, security, abuse-prevention, and legal requirements and are deleted, overwritten, or anonymised when they are no longer required for those purposes.

Further information about Porkbun’s processing is available in the Porkbun Privacy Policy.

8. General and business enquiries by email

You may contact Varyanz by email for general or business enquiries.

Depending on the information you provide, an email may contain your email address, sender name, subject, message, attachments, date and time of communication, and technical email metadata.

The information is processed to review your request, respond where a response is requested, prevent misuse of the contact channel, and document the handling of the request.

Where the request concerns a contract or steps requested before entering into a contract, the legal basis is Article 6(1)(b) GDPR. For other general enquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is responding to enquiries concerning Varyanz. Where processing is necessary to comply with a legal obligation, the legal basis is Article 6(1)(c) GDPR.

Providing the information is voluntary. However, we may be unable to process or answer a request if the information necessary to understand or respond to it is not provided.

9. Feedback, bug reports, and feature requests

Varyanz allows you to submit feedback, bug reports, and feature requests through the feedback form.

The required fields are the subject and message. Providing a name is optional. If you do not provide a name or other directly identifying information, the submission may be treated as anonymous, although technical connection data may still be recorded by the hosting environment.

The submitted information is used to review feedback, investigate reported errors, improve Varyanz, evaluate feature requests, maintain application security, and prevent misuse of the feedback system.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are maintaining and improving Varyanz, identifying and correcting technical problems, understanding voluntarily submitted feedback, and protecting the service against misuse.

10. Optional diagnostic information

When submitting a bug report, Varyanz may offer to include technical diagnostic information.

Diagnostic inclusion is optional. Before submitting the report, you can exclude the debug information entirely or deselect the diagnostic categories made available in the form. Only the information shown as selected when you submit the form is transmitted.

Depending on the selected categories, diagnostic information may include the browser name and version, operating-system information made available by the browser or app environment, Varyanz app version, the currently active view or comparison method, the number and types of loaded media, WebGPU availability or adapter information where available, viewport size, device pixel ratio, and entries from the Varyanz debug console.

The diagnostics do not include the contents of the media files selected for comparison. Varyanz cannot inspect arbitrary local files, obtain a complete identity of your device, or access the browser’s general developer console. It can only include information made available through normal browser or Android interfaces and debug information generated or recorded by Varyanz itself.

Before diagnostic information is stored, visible filenames are locally replaced with placeholders such as filename_01.png. Replacing filenames reduces the risk of identification but does not guarantee that the complete diagnostic report is anonymous.

Debug output and diagnostic information may contain technical details or accidentally include personal, confidential, or sensitive information. Review the information before submitting it. Do not submit passwords, authentication tokens, financial information, health information, private communications, or other highly sensitive information.

11. Processing and storage of form submissions

Feedback, bug reports, feature requests, and selected diagnostic information are processed through the PHP hosting environment provided by Porkbun.

Submissions are stored as individual files in an access-restricted directory outside the publicly accessible website directory. They are not automatically forwarded to an email inbox.

Access is restricted to authorised persons who need the information to review the submission, investigate the reported issue, maintain Varyanz, or respond to the request.

There is no automated deletion process. Submissions are reviewed and deleted manually when they are no longer reasonably required for handling the request, investigating the issue, documenting relevant communication, improving Varyanz, preventing misuse, or establishing, exercising, or defending legal claims.

Submissions are deleted no later than 90 days after receipt. A specific submission may be retained for longer where required by law or concretely necessary to investigate an unresolved issue or for the establishment, exercise, or defence of legal claims. It is deleted when that need ends.

If a submission contains a useful product idea, the idea may be transferred to an internal task or idea list without retaining the sender’s name, email address, or other unnecessary contact information.

You may request deletion of your submission at any time by contacting us. Statutory retention obligations and other lawful grounds for continued storage remain unaffected.

12. Privacy and legal enquiries by email

Privacy requests and other legal enquiries may be sent to legal@varyanz.app.

When you send an email, the processed information may include your email address, sender name, subject, message content, attachments, date and time of communication, and technical email metadata.

The email service is provided using Google services. For users in the European Economic Area, Google consumer services are generally provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google and its service providers may also process information outside the European Economic Area.

Email communications are processed to handle privacy requests, legal enquiries, complaints, and related correspondence.

The legal basis is Article 6(1)(c) GDPR where processing is necessary to comply with a legal obligation. In other cases, the legal basis is Article 6(1)(f) GDPR. Our legitimate interests are handling legal and privacy-related correspondence and documenting compliance.

Emails are deleted when they are no longer required for these purposes. They are generally reviewed for deletion within 12 months after the matter has been completed, unless a longer period is required by law or necessary for the establishment, exercise, or defence of legal claims.

Further information is available in the Google Privacy Policy.

13. Service providers and recipients

Personal data may be made available to Porkbun LLC and technical service providers acting on its behalf for domain, hosting, network, security, fraud-prevention, intrusion-prevention, and related service operations.

Personal data contained in privacy or legal email correspondence may be processed by Google Ireland Limited, Google LLC, and their service providers.

Information may also be disclosed to courts, authorities, legal advisers, or other recipients where disclosure is required by law or necessary for the establishment, exercise, or defence of legal claims.

We do not disclose personal data to advertisers, advertising networks, data brokers, or analytics providers.

14. International data transfers

Porkbun LLC is located in the United States. Google and its affiliated service providers may also process information in countries outside the European Economic Area.

Transfers of personal data outside the European Economic Area are subject to the requirements of Chapter V GDPR. Further information about the transfer mechanisms used by the relevant service providers is available in their current privacy and contractual documentation.

The relevant service providers may use subprocessors in other countries. Additional information about their processing and international-transfer safeguards is available in their respective privacy documentation.

15. Google Play

The Varyanz Android app is distributed through Google Play.

When you search for, download, install, update, review, or otherwise interact with Varyanz through Google Play, Google may independently process information such as your Google account information, device information, IP address, app installation and update information, purchase information where applicable, security information, and your interactions with Google Play.

This processing is performed independently by Google and is governed by Google’s privacy information and account settings. Varyanz does not control the data that Google independently processes to operate Google Play.

Varyanz does not currently use Google advertising services, Google Analytics, or Firebase Analytics within the app.

16. External links

Varyanz may contain links to external websites or services, including YouTube, TikTok, Instagram, and y4nku.com.

These services are contacted only when you deliberately open the relevant link. Varyanz does not currently embed content from these services.

After you open an external link, the relevant external provider is responsible for its own processing of personal data. The provider’s own privacy notice and terms apply.

Varyanz does not currently load third-party fonts, scripts, media, or other application assets from external content-delivery networks during ordinary application use.

17. Security

We use reasonable technical and organisational measures intended to protect personal data against accidental or unlawful loss, alteration, disclosure, destruction, or unauthorised access.

These measures include encrypted transmission using HTTPS, local processing of selected media, data minimisation, optional diagnostic inclusion, restricted access to form submissions, storage outside the publicly accessible website directory, and replacement of visible filenames in submitted diagnostics.

No internet transmission or storage system can be guaranteed to be completely secure. You should therefore avoid submitting information that is not necessary for your request.

18. Automated decision-making

Varyanz does not use personal data for automated decision-making or profiling within the meaning of Article 22 GDPR.

19. Your rights

Subject to the applicable legal requirements, you may request access to your personal data, correction of inaccurate or incomplete data, deletion, restriction of processing, and data portability.

You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR.

Where processing is based on consent, you may withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, contact legal@varyanz.app. We may request information necessary to verify your identity before fulfilling a request.

20. Right to complain

You have the right to lodge a complaint with a data-protection supervisory authority.

The supervisory authority responsible for the controller’s location is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany.

You may also contact the supervisory authority responsible for your usual place of residence, place of work, or the location of the alleged infringement.

21. Changes to this Privacy Notice

This Privacy Notice may be updated if Varyanz changes its functionality, technical implementation, service providers, data-processing activities, or legal obligations.

The “Last updated” date at the beginning of this notice identifies the current version.