What we know about you.

Controller within the meaning of Art. 4 (7) GDPR:

Controller

Roman Moor, Milbertshofener Straße 54, 80807 München, Germany

Contact

contact@galleyink.com

Data protection officer

None appointed — a one-person business is far below the threshold in § 38 (1) BDSG. Data-protection requests go to the address above and are answered by the person who wrote the software.

Galley processes no personal data for us, because Galley never sends anything to us. There is no telemetry, no crash reporting, no usage counter, no automatic update check, and no licence activation server.

Your fonts, sources, reports, exports and settings stay in files on your own computer. The licence file is a signed file that is checked offline. We have no way to know that you installed Galley, which fonts you opened, or whether you use it at all.

The one network path, and it is yours to start

Galley can connect to GitHub— on your explicit action, to push the version history of your own font project to a repository in your own account. If you use it, the connection runs between your machine and GitHub with a token you granted; the token is stored in Galley's configuration folder on your computer and is never transmitted to us. We are not a party to that traffic and receive nothing from it. If you never press Connect, the code never runs.

Everything else is offline by construction: the analysis engine makes no network calls at all. If you ever see Galley open a connection that is not the GitHub one you started, that is a bug — report it and we will treat it as a serious one.

Downloading the installer, of course, happens over the network — that is this site, covered below, not the application.

galleyink.com is a statically exported website: there is no application server of ours, no database, and no account system. The files are delivered by Vercel Inc. (USA) as our processor under Art. 28 GDPR.

Delivering a page over the internet necessarily discloses technical data to the host: your IP address, the time of the request, the page requested, the referring page and your browser's user agent. Vercel processes these in server logs to serve the site and to defend it against attack and abuse.

Purpose

Delivering the website; security and abuse defence

Legal basis

Art. 6 (1) (f) GDPR — our legitimate interest in a website that works and is not knocked over

Retention

Short-term, by the host, under their log-retention policy. We do not export, analyse, enrich or store these logs, and we do not build visitor statistics from them.

Processor

Vercel Inc. privacy policy

A single entry, galley.theme, in your browser's local storage. It records whether you chose the light, dark or paper theme so the page does not flash the wrong one on your next visit.

It is written only when you use the theme toggle, it holds one of three words, it is not an identifier, and it is never transmitted anywhere. Under § 25 (2) no. 2 TDDDG this is strictly necessary to provide a display you expressly asked for, so it needs no consent — which is why this site has no consent banner. Clearing your browser storage removes it.

Galley is in a closed beta. The form on the waitlist page is operated by Tally BV — August Van Lokekenstraat 71, 9050 Ghent, Belgium — an EU company storing responses on servers inside the European Union, acting as our processor.

• —What is asked: your email address and a few questions about what you draw with, so we can decide who to invite next and what to test against.
• —Why: to answer your request for access, to put your address on the download allowlist if we invite you, and to mail you when that happens.
• —Legal basis: Art. 6 (1) (b) GDPR — steps taken at your request before a contract; and Art. 6 (1) (a) for the answers you volunteer beyond your address.
• —Who reads it: a person. There is no scoring, no automated decision, and no onward transfer. It is never used for marketing, and there is no newsletter to be put on.
• —Who mails you: a person, by hand, from our own mailbox — see §9. There is no campaign platform in the loop, so nothing reports back whether you opened it.

The embed, stated plainly

The form is embedded in our page, which means your browser loads a script and a frame from tally.so when you open the waitlist page. At that moment your IP address and user agent become visible to Tally — that is unavoidable for any embedded form, and it is the only third-party resource this website loads. It happens on that one page, not site-wide. If you would rather not load it, write to contact@galleyink.com instead; a plain email is just as good a request.

Tally's privacy policy: tally.so.

Beta builds are served from a file host behind an access gate operated by Cloudflare, Inc. (USA / Cloudflare Germany GmbH, Munich). To download, you enter your email address; the gate mails you a one-time code and lets you through if the address is on the allowlist. Cloudflare processes that address, the code, your IP address and the request log on our behalf.

Legal basis

Art. 6 (1) (b) GDPR — giving you the beta access you asked for; Art. 6 (1) (f) for keeping a closed beta closed

Retention

Access logs are kept briefly by the provider; the allowlist entry lasts as long as the beta, or until you ask us to remove it

Processor

Cloudflare, Inc. privacy policy

Purchases go through Polar Software, Inc. as merchant of record. Polar is the seller of record, and for the payment they are an independent controller — they decide what a payment processor and a tax authority require. We never see your card details.

What reaches us is the order: your name, email address, country, order number and the licence issued. We use it to deliver the licence, to answer support and refund requests, and to keep the books.

Legal basis

Art. 6 (1) (b) GDPR — performing the licence agreement; Art. 6 (1) (c) for the retention that German tax and commercial law imposes (§ 147 AO, § 257 HGB)

Retention

Order and invoice records for the statutory 6 to 10 years. Erasure requests are honoured for everything the statute does not force us to keep.

Polar

Privacy policy · Data processing addendum

If you email contact@galleyink.com, we process your address, your message and anything you attach, in order to answer you. Legal basis: Art. 6 (1) (b) GDPR where it concerns a contract or a request before one, otherwise Art. 6 (1) (f) — our and your interest in the question being answered.

The mailbox is one company in both directions: Migadu-Mail GmbH — Rohnen 587, CH-9414 Schachen, Switzerland — takes delivery of everything addressed to galleyink.com, stores it, and sends every reply. They act as our processor under Art. 28 GDPR; their privacy policy is also the data processing agreement.

Switzerland holds an adequacy decision under Art. 45 GDPR, so no standard contractual clauses are needed for that hop and none is claimed. No campaign platform, no marketing tool and no mail-tracking service sits anywhere in this path — nothing we send you reports back when you opened it or what you clicked.

Correspondence is kept as long as the matter is live. Mail that qualifies as a commercial letter is retained for the statutory period (§ 257 HGB, § 147 AO); the rest is deleted when it stops being useful.

Ordinary email is not end-to-end encrypted in transit between providers. For anything you consider sensitive, say so and we will agree another route.

The complete list. Nobody else receives personal data from us — no advertising network, no data broker, no analytics vendor, because none of those exists here.

Vercel Inc.

Website hosting and server logs · USA · processor under Art. 28, on EU standard contractual clauses and/or the EU–US Data Privacy Framework

Tally BV

The waitlist form · Belgium, EU servers · processor under Art. 28 · no third-country transfer

Cloudflare, Inc.

Download gate and file delivery · USA and Germany · processor under Art. 28, on standard contractual clauses and/or the Data Privacy Framework

Migadu-Mail GmbH

Email — delivery, storage and sending, in both directions · Switzerland · processor under Art. 28 · adequacy decision under Art. 45, no further safeguards needed

Polar Software, Inc.

Payment, tax and invoicing as merchant of record · USA · independent controller for the sale, processor for licence delivery

Authorities

Only where a law obliges us — a tax audit, a court order. We have never received such a request; if one arrives that we are permitted to disclose, we will say so.

For every transfer outside the EU or EEA, the transfer rests on Chapter V GDPR safeguards: the European Commission's standard contractual clauses, an adequacy decision, or both. Ask and we will tell you which applies to which provider.

• —Server logs: short-term at the host, never copied out.
• —Waitlist entries: until the closed beta ends, and at most twelve months after, unless you ask sooner. Then deleted.
• —Allowlist addresses: for the duration of the beta.
• —Orders and invoices: six to ten years, because German tax and commercial law says so and gives us no discretion.
• —Correspondence: while the matter is live, plus the statutory period where it is a business letter.
• —Everything in the application: not applicable — it never reaches us.

Under the GDPR you have, against us, at no cost:

• —Access — Art. 15: what we hold about you, and a copy of it.
• —Rectification — Art. 16.
• —Erasure — Art. 17, except where a retention duty stands in the way, in which case we will name the duty.
• —Restriction — Art. 18.
• —Portability — Art. 20: a machine-readable copy, or transmission to someone else.
• —Withdrawal of consent — Art. 7 (3), effective for the future, and never disadvantageous to you.
• —Complaint to a supervisory authority — Art. 77.

One email is enough. No form, no ticket system, no identity ceremony beyond what is needed to be sure it is really you — and an answer within one month, as Art. 12 (3) requires.

The authority responsible for us:

Supervisory authority

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de

You may also complain to the authority where you live or work. We would rather you wrote to us first, but the choice is entirely yours and nothing here is conditional on it.

No automated decision-making and no profiling within the meaning of Art. 22 GDPR takes place. A person reads every waitlist request and decides.

Security

The site is served over TLS. There is no login on our side, no password of yours for us to lose, and no database of user records to breach — the absence of an account system is a security measure as much as a convenience one. Our processors carry the usual certified infrastructure controls.

Children

Galley is a professional tool for type designers. It is not directed at children and we do not knowingly process data of anyone under 16.

Changes

This notice will change when what we do changes — a new processor, a new payment route, a feature that touches the network. The date at the top is the effective date, and the change will always be in the direction of naming more, never less. If a change ever meant that data started leaving your machine, it would be announced in the application before it happened, not buried here.