Or email us at contact@planet-z.com
Last updated: 22 September 2026.
Planet Z is a personal creative project. This notice explains how we process personal information when you visit our website, contact us or subscribe to email updates. For privacy questions or requests, email contact@planet-z.com.
We use Cloudflare for website delivery and security. When your browser connects, Cloudflare processes connection data such as your IP address, the requested page, request time and browser information. This is needed to deliver the website, maintain its availability and protect it against abuse. The legal basis is our legitimate interest in operating a reliable, secure website under Article 6(1)(f) GDPR.
Images, graphics and audio are served with the website. We have not added advertising pixels, third-party analytics, externally hosted fonts or embedded social-media players. Cloudflare also describes its processing of network and security data in its Privacy Policy.
If you submit the contact form, we receive your email address and message. Cloudflare processes and sends the message to our mailbox, which uses Google Workspace. Your address is used to reply. If you contact us directly by email, we also receive the information and any attachments you include.
We use this information to handle your request and follow up with you. The legal basis is our legitimate interest in responding to correspondence under Article 6(1)(f) GDPR. Where your request concerns entering into or performing a contract with us, Article 6(1)(b) GDPR applies instead. Providing this information is voluntary, but we need an email address and message to handle a form submission. Contacting us does not subscribe you to email updates.
To limit spam, the form service processes your IP address and email address and derives protected identifiers for short-term request counters. These identifiers are pseudonymous, not anonymous. This processing serves our legitimate interest in protecting the contact service under Article 6(1)(f) GDPR. We do not maintain a separate contact-message database or intentionally write message contents to application logs. Cloudflare Workers Logs and Traces are disabled for our contact service. Cloudflare can still process technical information needed to operate, secure and deliver the service.
We review completed contact requests monthly. We delete correspondence when it is no longer needed to handle your request or related follow-up, unless a legal obligation or a specific need to establish, exercise or defend legal claims requires longer retention. This review is carried out manually; messages are not automatically deleted after a fixed period.
Deleting correspondence from Gmail normally moves it to Trash, where it is automatically deleted after 30 days unless removed earlier. Google Workspace then provides an additional administrator recovery period of up to 25 days after permanent deletion. These recovery periods are separate from our monthly review; archiving a message does not delete it.
Cloudflare documents a 31-day retention period for its email delivery metrics and event records, which can include sender and recipient addresses, the message subject, message identifiers and delivery results. Our form uses a fixed subject rather than putting your message in the subject line. This period concerns delivery records, not the correspondence stored in our Gmail mailbox.
Service providers also process technical delivery and security records and may hold temporary copies for delivery, retries, recovery or security. Their retention depends on the purpose, the applicable service terms and any legal requirements. Google’s data-processing terms provide for deletion from its systems as soon as reasonably practicable and within a maximum of 180 days after a deletion instruction for data that we can no longer recover, subject to legally required retention. This is not an automatic expiry period for messages in our inbox.
Sound, volume and motion choices are kept in the page’s temporary memory during your visit. We do not save these preferences in cookies or persistent browser storage, and reloading the page restores the default settings. Touch devices use sound on/off with volume controlled by the device.
Unsent contact-form entries stay in the page’s temporary memory when you close and reopen the form. Our code does not save them in persistent browser storage. Reloading the page clears that temporary state; your browser may separately provide its own autofill features.
Our website code does not set advertising or analytics cookies or read or write local storage. If Cloudflare presents a security challenge, it may use a cf_clearance cookie to remember a successful check and avoid repeating it. Our challenge-passage setting is 30 minutes; Cloudflare applies additional validation allowances for clock differences and certain background requests. These checks protect the availability and security of the website. Further information about security cookies is available in Cloudflare’s cookie documentation.
You can subscribe to news and new releases from Planet Z. We use Klaviyo, Inc. to manage subscriptions and send these emails. Subscribing is voluntary and does not create a user account. You can use the website without subscribing.
When you submit your email address, it is sent to Klaviyo with the signup source and subscription request. We use double opt-in: Klaviyo sends you a confirmation email, and you must follow its confirmation link before you are added to our email-update list. An unconfirmed request does not authorize email updates.
Klaviyo stores your email address and subscription records, including your consent status, signup source and confirmation or withdrawal events. It also handles delivery information. Connections to the signup service, email images, links and Klaviyo-hosted subscription pages can expose technical information such as your IP address, request time and browser or email-client information.
The legal basis for email updates is your consent under Article 6(1)(a) GDPR. You can withdraw it at any time using the unsubscribe link in an email update, the unsubscribe option on your subscription page, or by contacting contact@planet-z.com. Withdrawal does not affect the lawfulness of earlier processing. We retain evidence of consent and withdrawal where needed to demonstrate compliance and respect your preferences.
We use your subscription information while you remain subscribed and we continue to provide email updates. We review unconfirmed signup requests monthly. If your latest request is at least 30 days old and you have not confirmed your subscription, we remove the unconfirmed request and any associated profile that is no longer needed for another valid purpose. This is a manual review, so deletion does not happen automatically on day 30.
Unsubscribing stops email updates but does not automatically delete your Klaviyo profile. We retain only the information needed to respect your opt-out, demonstrate consent or withdrawal, or establish, exercise or defend legal claims, based on our legitimate interests under Article 6(1)(f) GDPR. We review this information regularly and delete it when those purposes no longer apply. You can request deletion by contacting us.
We have disabled Klaviyo’s recording of email opens and link clicks, as well as email-to-website activity tracking. We do not use these functions to measure your engagement with our email updates.
Images in emails can still load from Klaviyo’s servers, and email links can still pass through Klaviyo. Disabling measurement does not remove every remote image request or link redirect. Technical connection and delivery information may therefore still be processed when you receive an email, load its images or follow a link.
Our website does not include Klaviyo’s website-activity tracking script. Its signup code contacts Klaviyo only when you submit the newsletter form on our public website. Subscription confirmation, delivery and unsubscribe records remain available so we can manage your subscription.
Our YouTube, Instagram, TikTok and X buttons are ordinary links, not embedded feeds or players. Opening a link takes you to that provider in a new tab. The provider’s privacy notice applies to your visit there.
We use Cloudflare, Inc. for delivery and contact-form processing, Google Workspace for our mailbox, and Klaviyo, Inc. for email subscriptions. These providers use international infrastructure and subprocessors. Processing may take place outside the European Economic Area, including in the United States; we do not promise that all processing takes place in the EU.
Cloudflare’s Data Processing Addendum forms part of its self-service agreement. We have also accepted Google’s Cloud Data Processing Addendum for our Google Workspace service. These terms regulate processing on our behalf and provide safeguards for international transfers, including EU standard contractual clauses where required and applicable adequacy arrangements. Cloudflare also processes certain network and security information under its own Privacy Policy.
Klaviyo’s Data Processing Agreement forms part of its service agreement and covers processing of subscriber data on our behalf. It provides for transfers under the EU–US Data Privacy Framework where applicable and valid, and EU standard contractual clauses where that framework cannot be relied on.
Further details are available in Cloudflare’s Data Processing Addendum, Google’s Cloud Data Processing Addendum and Klaviyo’s Data Processing Agreement. You can contact us for further information about applicable transfer safeguards.
Where the GDPR applies, you may request access to, correction or deletion of your personal data, restriction of processing and, where the legal conditions are met, data portability. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.
You may object to processing based on legitimate interests on grounds relating to your particular situation. You may object to processing for direct marketing at any time, including related profiling. You may also complain to a data-protection supervisory authority, including in the country of your habitual residence, workplace or the alleged infringement. To exercise your rights with Planet Z, contact contact@planet-z.com.