Privacy Policy

standby.design & the standby-design MCP server · Last updated: July 2, 2026

The short version

We do not collect, store, or share any personal data. There are no accounts, no cookies, and no cross-site trackers. The website uses self-hosted, cookieless, anonymous analytics (see below); the MCP server uses none at all.

1. Controller

Karsten Kreh
Schwanthalerstr. 141
80339 Munich, Germany
Email: mail@karstenkreh.design

2. Hosting and server logs

The site and MCP endpoint are hosted on a server in Germany (Hetzner Online GmbH, Nuremberg). When you access the site, the web server processes technically necessary access data (IP address, time of request, requested resource, user agent) in log files. These logs are required for secure operation, are not used for tracking, and are deleted automatically after a short time. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).

3. Analytics (self-hosted Umami)

The website (not the MCP server) uses Umami, an open-source analytics tool, self-hosted on the same server in Germany. It works without cookies and without cross-device tracking, does not store IP addresses, and only records anonymous, aggregated usage data (pages viewed, referrer, browser type, device category, coarse region). Individual visitors cannot be identified, and no data is shared with anyone. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding aggregate usage). Since no personal data is stored and no information is read from your device (§ 25 TDDDG), no consent banner is required.

4. Font previews via Fontshare (Type tool)

The Type tool can load font previews from Fontshare, a free font service by the Indian Type Foundry. Only when you browse or select such a font does your browser connect to Fontshare's servers, which technically requires transmitting your IP address and may involve a transfer to countries outside the EU. That request is governed by Fontshare's terms and privacy policy. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in rendering the fonts you chose); the connection is only triggered by your active use.

5. MCP server

The MCP endpoint (mcp.standby.design and the standby-design-mcp npm package) is stateless: every request is computed, answered, and not stored. Inputs are design parameters (colors, ratios, sizes) — never personal data. There are no accounts and no authentication.

6. Your rights

Under the GDPR you have the right to:

• access the personal data we process about you (Art. 15),
• rectification (Art. 16), erasure (Art. 17), and restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing based on Art. 6(1)(f) (Art. 21).

Since we store practically no personal data, an access request will usually come back empty. Send requests to the email address above.

7. Complaints

You have the right to lodge a complaint with a data protection supervisory authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, lda.bayern.de.

Contact

Questions or concerns: open an issue at github.com/KarstenKreh/Standby.Design or email mail@karstenkreh.design.