Data Privacy

Status: 11 August 2026. This implementation summary must receive professional legal review before production wording is treated as final.

1. Controller

Faster Than Light Productions, Neckarstraße 214, 70190 Stuttgart, Germany. Represented by Maximilian Dauner and Matteo Walter. Contact: contact@ftl.vision.

2. Website delivery

The website is hosted on a server administered by FTL at netcup GmbH in Germany. Connection data such as IP address, request time, path, status, browser and operating-system information may be processed transiently to deliver and protect the service. Regular access logs are not used for analytics, advertising or visitor profiling. Security/error information is retained only as needed for incident response and normally no longer than 14 days.

3. No tracking

FTL uses no advertising trackers, analytics pixels, fingerprinting, social plugins or marketing profiles. Core media, fonts and scripts are served from FTL-controlled infrastructure. The site uses one short-lived, essential, Secure, HttpOnly, SameSite=Strict cookie solely to protect forms and the Navigator from cross-site and automated abuse. It expires after 30 minutes and is not used to recognize visitors over time.

4. Contact form

The contact form processes name, work email, organization, selected route, project description, optional context, timeframe and optional URL to answer the inquiry and, where applicable, take steps before entering a contract. The URL is never fetched automatically. The submission is sent by encrypted SMTP to the FTL mailbox through the contracted mail service associated with the ftl.vision domain. It is not stored in an application database. Raw form content is excluded from application logs. Unsuccessful inquiries are deleted from the mailbox after 12 months unless legal duties or an ongoing relationship require longer retention.

5. FTL Project Navigator

The Navigator is AI-assisted. The bounded conversation visible in the browser is sent through FTL’s server to OpenAI to generate a response. The browser never receives an API key. FTL configures requests with provider-side response storage disabled and does not store unsent transcripts in an application database or browser storage. OpenAI may nevertheless process service and safety data under its applicable contractual and technical terms; any international transfer safeguards and exact provider entity must be reflected in the legally reviewed final notice.

The Navigator accepts no files and should not receive secrets, credentials, special-category personal data or confidential business information. It does not browse the web or access FTL’s customer-management system. If a visitor creates a Project Brief, the brief remains editable. Only the reviewed brief is included with a contact submission; the raw transcript is not emailed.

6. Abuse prevention and security

Short-lived tokens, a form-start timestamp, a honeypot and privacy-minimized in-memory rate keys help protect contact and chat endpoints. IP addresses are used transiently for this purpose and are not written to ordinary application logs. Logs exclude message content, email addresses, tokens, cookies and model context.

7. Recipients and processors

Data may be processed by FTL’s responsible founders and the infrastructure, mail and AI providers required for the selected function: netcup for hosting, the contracted mail provider operating the supplied UDAG mail service, and OpenAI for Navigator requests. The exact contractual legal entities, processing agreements, retention settings and international-transfer safeguards require confirmation in the final professional legal review.

8. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to processing. You may also complain to a competent data-protection authority. Direct requests to contact@ftl.vision.

9. Security and changes

FTL uses TLS, restricted secrets, input validation, rate limiting and data-minimized logging. This notice is updated when the website’s functions, providers or processing change.