Privacy_

Who is responsible

Sebastian Zorn, trading as neverdone, Amalienstraße 26, 80333 Munich, Germany, is responsible for personal data processed through this website.

For privacy questions or requests, email hi@neverdone.app.

Hosting and website delivery

This website is hosted by Vercel Inc. Vercel processes technical request data to deliver pages, images, videos and fonts, maintain availability and protect the website against misuse. This can include your IP address, the requested URL, request time, browser and device information, referring page and response status.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is operating a reliable and secure website. Technical records are retained for the period needed for delivery, troubleshooting and security, subject to the hosting service’s retention settings and any legal preservation requirements.

Vercel operates internationally, so processing may take place outside the European Economic Area, including in the United States. Vercel’s Data Processing Addendum describes its processing terms and transfer safeguards, including European Commission standard contractual clauses where applicable. Its privacy notice describes processing for which Vercel acts as a controller. You can contact us for information about the safeguards applicable to your data.

Email enquiries

If you email hi@neverdone.app, we process your email address, your name if provided, message contents, attachments and the technical information accompanying your email. Our email service provider processes correspondence to deliver and store it.

We use this information to answer your enquiry and discuss or carry out the work you request. Article 6(1)(b) GDPR applies to enquiries concerning a contract with you or steps you request before entering one. For other correspondence, Article 6(1)(f) GDPR applies, with the legitimate interest of answering business enquiries.

Correspondence is kept for as long as needed to handle the enquiry and any resulting business relationship. Records that must be retained under tax or commercial law are kept for the applicable statutory period under Article 6(1)(c) GDPR. Records needed to establish, exercise or defend legal claims may be retained for that purpose under Article 6(1)(f) GDPR.

You choose whether to contact us. Without a reply address and enough information about your request, we may be unable to respond.

Appointment booking with Calendly

Our contact buttons link to a booking page operated by Calendly LLC in the United States. Calendly is not embedded in this website. Your browser connects to Calendly when you follow the booking link.

When you book, we receive the contact details, appointment time and any answers you submit on the booking page. We use these details to arrange the appointment and respond to your request. The legal basis is Article 6(1)(b) GDPR for appointments concerning a contract with you or pre-contractual steps you request, and Article 6(1)(f) GDPR for other business appointments. Our legitimate interest is coordinating those appointments.

Booking records are retained while needed to arrange the appointment and handle its follow-up. The retention criteria for subsequent correspondence and legal records are described in the email section above. You can email us instead of using Calendly.

Calendly processes booking information on our behalf and also processes certain information for its own purposes as described in its privacy notice. Its Data Processing Addendum provides for transfers to the United States under the applicable Data Privacy Framework, with standard contractual clauses as a fallback where specified. Contact us for information about applicable transfer safeguards.

Storage in your browser

When you select a light or dark appearance, the website remembers your choice in local storage under nd-theme. This value stays in your browser and is not sent to us or used for advertising. It has no programmed expiry. Switching back to your operating system’s current appearance removes the saved override.

You can delete this preference through your browser’s site-data settings. Blocking browser storage prevents your appearance choice from being remembered.

The opening animation flag and the Bad UX Game’s failed-attempt counter are held only in page memory. They remain available during client-side navigation and reset on a full page reload. The application no longer reads or writes the older nd-intro and nd-bug-failed-attempts storage entries. If you visited an earlier version, you can remove those unused entries through your browser’s site-data settings.

The Bad UX Game

The checkout, newsletter prompt and cookie banner in the game are simulations. The game does not place an order, charge a card or subscribe you to a mailing list. Checkout entries are held in the running game’s memory and are not submitted to a payment service or our server. The failed-attempt counter stays in page memory as described above. Please do not enter real payment details.

Fonts, media and external links

The website serves its fonts, images and videos from its own hosting. The motion-study prototype uses fonts available on your device. There are no embedded video players or social-media feeds.

External links, including the book link in the game, take you to another provider’s website. That provider receives connection information when you follow the link and its own privacy terms apply.

Analytics and advertising

This website does not include Google Analytics, Google Tag Manager, Hotjar, advertising pixels or session-recording tools. The game’s cookie banner does not control privacy settings for this website.

Your rights

Subject to the conditions in the GDPR, you can request access to your personal data, correction, erasure, restriction of processing and data portability. Where processing relies on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Where processing relies on legitimate interests, you can object on grounds relating to your particular situation. You can object to processing for direct marketing at any time.

Send requests to hi@neverdone.app. We normally respond within one month of receiving a request. If an extension is permitted because a request is complex or there are several requests, we will explain the reason within that month. Requests are generally free of charge, subject to the exceptions in the GDPR.

You can lodge a complaint with a data protection supervisory authority, particularly in the country where you live or work, or where you believe an infringement occurred. For private businesses in Bavaria, the authority is the Bavarian State Office for Data Protection Supervision (BayLDA).

Changes to this policy

We update this page when the website’s processing changes. The date above identifies the latest revision.