M37 · privacy
What these pages record, and why
This notice covers the pages under /m37 on apps.9592.tech. Version 2026-10-03.
Who is responsible
9592 Solutions UG (haftungsbeschränkt), Fährstr. 217, 40221 Düsseldorf, Germany. HRB 287814, VAT ID DE364316497. Contact: christo@9592.tech.
Nothing is stored on your device
These pages set no cookies and use no local storage. There are no analytics tags, no advertising pixels, and no third-party scripts, fonts or embeds of any kind. Nothing is written to or read from your device, so § 25 TDDDG does not apply here and there is no consent banner to click.
The run pages, one per video, load a small script of our own so that their tables can be sorted and narrowed in place. All it does is rearrange rows that already arrived with the page. It reads nothing about you and keeps nothing, and sorting or filtering a table makes no request back to us, so none of it reaches the log described below.
The format lab
The format lab at /m37/format-lab converts the image you choose inside your browser, with your browser's own encoders. The image is never uploaded: the page has no route that could receive it. Its script sends three short notes back to us: that the page opened, that a conversion finished and its keep/lose list was opened, and that the “notify me when the iPhone app ships” button was tapped. Each note carries the campaign parameters in the link you followed, which formats were involved, a random number that exists only while the tab is open (so the three notes from one visit can be read together), and the same request details and IP hash as the request log below, reduced to whether you were on a phone or a computer. Nothing about the image itself is sent, and the button asks for no address. Same purpose, basis and retention as the request log.
The matador page
The page at /m37/matador runs its game inside your browser. Its script sends us a short record when the page opens, one when you finish an attempt (which bull you picked, how many seconds you lasted, whether that was the full 30, the attempt's number in this visit and whether you steered with a mouse, a finger or the keyboard; at most 50 per visit), and one when you tap the “I'd play this” button. Each record carries the same things as the format lab's above: the campaign parameters in the link you followed, a random number that exists only while the tab is open, and the request details and IP hash of the request log below, reduced to whether you were on a phone or a computer. The button asks for no address. Same purpose, basis and retention as the request log.
The request log
Our own server records one row for each request to these pages. That row holds the path you asked for, any campaign parameters in the link you followed, the referring page, your browser's user-agent string, the country your request came from, and a timestamp.
Your IP address is not stored. Before anything is written it is combined with a secret value and your user-agent string and reduced to a short one-way hash, which lets us tell repeat visits apart without keeping anything that can be turned back into an address. The secret is rotated, and rotating it severs the link to every earlier row.
The purpose is to measure how many people arrive from which video, and how many go on to do anything. The basis is our legitimate interest in knowing whether this work reaches anyone, under Art. 6(1)(f) GDPR. Rows are kept for twelve months and then deleted.
The form
If you send us a request, we store what you typed: the kind of request, your description, your email address, and your organisation if you gave one. We also store the campaign parameters from the link you arrived by, so we know which video the request came from.
We use it to answer you and to decide whether to take the work on, under Art. 6(1)(b) GDPR for steps ahead of a possible contract and Art. 6(1)(f) for the rest. It is not used for advertising and it is not shared with anyone. If a request becomes a piece of work, the correspondence moves into our ordinary business records; otherwise it is deleted within twenty-four months.
Processors
The site runs on Vercel and the database is Neon, both under data processing agreements. The database sits in the EU (Frankfurt). Vercel's edge network can route a request through a location outside the EU on its way to us; that transfer runs on the EU standard contractual clauses.
Your rights
You can ask for access, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. Write to christo@9592.tech. You can also complain to a supervisory authority; ours is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.