Iron Panda Labs

Privacy Policy

Last updated: July 2026

The short version: this website has no accounts, no forms, no cookies, no analytics, and loads no third-party scripts. We couldn't build a profile of you if we wanted to — and we don't want to. The only personal data we ever handle is what you choose to send us by email.

1. Data controller

The controller responsible under the EU General Data Protection Regulation (GDPR) is:

Bunzel Capital UG (haftungsbeschränkt) (operating as Iron Panda Labs)
Theodor-Heuss-Str. 54, 37075 Göttingen, Germany
Email: privacy@ironpandalabs.com

2. What this website collects

Nothing, actively. The site is a set of static pages. It sets no cookies, runs no analytics, embeds no third-party scripts or fonts, and contains no signup forms.

3. Hosting

These pages are served by Cloudflare Pages (Cloudflare, Inc.). Like any web server, Cloudflare processes technical connection data (IP address, browser information, requested URL) to deliver the pages and defend against abuse, and retains such logs briefly according to its own policies. Legal basis: our legitimate interest in serving a website securely (Art. 6(1)(f) GDPR). See the Cloudflare privacy policy.

4. Email

If you write to us (support@, dev@, privacy@), we receive what you send — including your email address — and use it solely to answer you. Our mailboxes are hosted by Zoho Mail (Zoho Corporation), configured for EU data residency. Legal basis: answering your request (Art. 6(1)(b) or (f) GDPR). Support conversations are deleted once resolved, at the latest after 12 months, unless statutory retention requires otherwise.

5. Our apps

Each product states plainly what it does with your data. For apps distributed through the Mac App Store, Apple processes your purchase — we never see payment details or your identity from a purchase.

Glassine is local software by design: it makes no network requests of its own — no telemetry, no accounts, no cloud. Your photos and backups never leave the hardware you point it at. Crash reports and diagnostic files exist only on your Mac and are transmitted only if you personally choose to email them to us.

6. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). Since we hold no data about you unless you have emailed us, exercising these rights is usually as simple as asking us to delete the correspondence. You also have the right to lodge a complaint with a supervisory authority — for us, the Landesbeauftragte für den Datenschutz Niedersachsen.

7. Changes

If this policy changes (for example, when a new product launches), the current version is always at this address, with the date above updated.