Privacy Policy.

The policy

• 01

  Who is responsible

  This website, www.flavatars.com, is operated by Flava Production Pylypenko — the studio behind Flavatars — Dorfstrasse 14a, 8444 Henggart, Zurich, Switzerland. The controller within the meaning of the GDPR is Oleg Pylypenko.

  For every question about your personal data, one address is enough: info@flavatars.com. We answer ourselves, not through a call center.

• 02

  What data we collect

  We collect far less than most websites, and nothing behind your back:

  • Server logs. When you open a page, our hosting provider records technical data needed to deliver it: your IP address, date and time, the requested URL and your browser type. Without this, a website cannot be served or defended against abuse.
  • Forms. If you write to us through any form on this site — the contact form, the career form or a product waitlist — we receive what you type: your name, email address, your message, and — for applications — the links you choose to share, plus the page the form was sent from. If you arrived through an ad and allowed marketing cookies, the ad-click reference travels along too; without that consent it does not. Nothing is collected from a form you did not send.
  • Analytics — only if you agree. If you accept analytics in the cookie banner, Google Analytics 4 measures how the site is used: pages viewed, approximate region, device type. If you decline, no analytics run. Declining is the default.
  • Video delivery. Films on this site stream from a video platform that receives the technical data any video player needs: your IP address and device capabilities, used to pick the right stream quality.
• 03

  Why, and on what legal basis

  Serving the site, keeping it secure and streaming its films: legitimate interest (Art. 6 (1) f GDPR) — a portfolio site has to load, play and stay safe.

  Answering your enquiry or application: pre-contractual steps you asked for (Art. 6 (1) b GDPR).

  Analytics and ad-conversion measurement: your consent (Art. 6 (1) a GDPR), given in the cookie banner and withdrawable at any time.

  For visitors from Switzerland, the same standards apply under the revised Swiss Data Protection Act (revFADP).

• 04

  Cookies and consent

  Essential preferences — your theme, sound setting and your cookie choice itself — are stored in your browser and are always on: the site needs them to respect your decisions.

  Everything else waits for you. Google Analytics runs in Consent Mode v2 with every category denied by default; its cookies (the _ga family) are set only after you opt in.

  You can change your mind at any moment: the «Cookie settings» button in the footer of every page re-opens the dialog, and withdrawing is as easy as agreeing was.

• 05

  Service providers we rely on

  A small, deliberate set of processors helps run this site. Where they are based in the USA, transfers are covered by the EU–U.S. Data Privacy Framework and/or EU standard contractual clauses:

  • Vercel Inc. (USA) — hosting and content delivery; processes server logs.
  • Google Ireland Ltd. / Google LLC — Google Analytics 4, only after your consent; usage data retained up to 14 months.
  • Formspree Inc. (USA) — receives your form messages, keeps them in its own submission archive and delivers them to our inbox.
  • Mux Inc. (USA) — adaptive video streaming for the films on this site.
  • YouTube (Google) — some films load from YouTube only after you press play, in privacy-enhanced mode (youtube-nocookie.com). Before that click, your browser sends YouTube nothing.
  • Fonts are self-hosted on our own domain — opening this site sends no request to any font service.
• 06

  How long we keep it

  Server logs are rotated by our hosting provider on a short technical cycle. Messages from the forms stay in our inbox and in Formspree’s submission archive for as long as the conversation and legal obligations require, then go. Analytics data expires automatically after at most 14 months. We keep no marketing databases and send no newsletters.

• 07

  Your rights

  Under the GDPR you can, at any time and free of charge:

  • ask what data we hold about you (access), and have it corrected or deleted;
  • restrict processing, or receive your data in a portable format;
  • object to processing based on legitimate interest;
  • withdraw any consent — from that moment on, without affecting what was lawful before;
  • complain to a data-protection supervisory authority, for example the one of your home country.
• 08

  Contact and changes

  Write to info@flavatars.com — for data questions, requests or anything this page left unclear. When the services behind the site change, this page changes with them; the date below always tells you which version you are reading.

  Last updated: August 1, 2026.