FlowDesign

Privacy Policy

Last updated: February 9, 2026

1. Overview

FlowDesign ("we", "us", "our") operates the website flowdesign.earth (the "Website"). This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

Data Controller: FlowDesign, contactable at [email protected].

FlowDesign is an informational website. We do not require user accounts, do not collect personal birth data, and do not offer personalized chart calculations on this website.

2. Data We Collect

2.1 Server Logs

Our web server (nginx) automatically collects standard access logs, which may include:

  • IP address
  • Browser user-agent string
  • Referring URL
  • Pages visited and timestamps
  • HTTP status codes

Server logs are retained for 30 days for security and operational purposes, then automatically deleted.

2.2 Cookies

This website uses the following cookies:

  • NEXT_LOCALE — stores your preferred language for up to 1 year. This is a functional cookie essential for the multilingual experience. No consent required under GDPR (strictly necessary).

We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

3. Legal Basis for Processing (GDPR)

For visitors from the European Economic Area (EEA), we process data under the following legal bases (GDPR Article 6):

  • Legitimate interest (Art. 6(1)(f)) — server logs for website security, abuse prevention, and operational monitoring.
  • Strictly necessary — the NEXT_LOCALE cookie is essential for delivering the website in your preferred language.

4. How We Use Your Data

We use the collected data solely to:

  • Ensure the security and operational stability of the website
  • Detect and prevent abuse (DDoS, scraping, unauthorized access)
  • Deliver content in your preferred language
  • Understand aggregate traffic patterns (no individual profiling)

We do not sell, share, or transfer your personal data to third parties for marketing, advertising, or any commercial purpose.

5. Third-Party Services

This website does not integrate third-party analytics services (such as Google Analytics), advertising networks, or social media tracking pixels. All content is served directly from our infrastructure.

6. Your Rights

6.1 GDPR Rights (EEA Residents)

Under the General Data Protection Regulation, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to processing based on legitimate interest
  • Lodge a complaint with your local data protection authority

We will respond to all legitimate requests within 30 days. If we need additional time, we will notify you and explain the reason.

6.2 CCPA Rights (California Residents)

Under the California Consumer Privacy Act:

  • You have the right to know what personal information we collect
  • You have the right to request deletion of your personal information
  • We do not sell personal information
  • We will not discriminate against you for exercising your rights

7. Do Not Track

We honor Do Not Track (DNT) signals. Since we do not use tracking technologies, there is no change in behavior when DNT is enabled.

8. Children's Privacy

This website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. International Data Transfers

Our servers are located in the United States. If you are accessing this website from outside the United States, please be aware that your data (server logs containing IP addresses) may be transferred to and processed in the United States. By using this website, you consent to this transfer. We ensure that all data is handled in accordance with this Privacy Policy regardless of where it is processed.

10. AI and Public Data

FlowDesign provides publicly accessible encyclopedic content about the Human Design System. This content may be accessed by AI systems and search engines through our public pages, sitemap, and structured data endpoints, subject to our robots.txt directives. No personal data is involved in these public endpoints.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

12. Contact

For any privacy-related inquiries or to exercise your rights, please contact us at [email protected].