Privacy Policy
Last updated: June 2026
We take the protection of your personal data seriously. This policy explains what data we process when you visit snippets.media, on what legal basis, and the rights you have. Processing is governed by the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
1. Controller
Tariq Khan, trading as snippets.media
Am Neuen Markt 9 E-F, 14467 Potsdam, Germany
Email: hey@snippets.media
2. What we process, and why
snippets.media is a portfolio and contact website. It does not sell anything online, it runs no advertising, and it builds no user profiles. In practice we process only:
- technical access data when you load the site (server log files, see section 3),
- the details you provide if you book an introductory call (section 5) or write to us by email (section 6).
3. Hosting and server log files
This website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you access the site, Cloudflare automatically processes server log data, including your IP address, browser type and version, operating system, referrer URL and the time of the request, in order to deliver the site securely and reliably and to defend against attacks. This data is not merged with other sources and is used solely for operational security and troubleshooting. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in a secure, performant website). Cloudflare also acts as a content delivery network and security layer. Transfers to the USA are safeguarded by Cloudflare's certification under the EU-US Data Privacy Framework and, in addition, by the EU Standard Contractual Clauses.
4. Cookies
We use only technically essential cookies. Our hosting and security provider may set a short-lived cookie that is strictly necessary to operate the site and protect it from abuse. We do not use advertising, marketing or third-party analytics cookies, and we do not display a consent banner because no consent-based tracking takes place. Legal basis: Art. 6 (1)(f) GDPR and § 25 (2) TDDDG (storage strictly necessary to provide the service).
5. Fonts
We use the Inter typeface, which is hosted on our own server. No font files are loaded from Google or any other third party, so no data about your visit is transmitted to an external font provider.
6. Booking a call
If you choose to book an introductory call, the button takes you to our scheduling provider Cal.com (we use its European instance, cal.eu). No booking data is processed while you are on snippets.media; it is only processed once you open Cal.com and enter it there (such as your name, email and chosen time) so the appointment can be arranged. Legal basis: Art. 6 (1)(b) GDPR (steps taken at your request prior to a contract). Cal.com's own privacy notice applies: cal.com/privacy.
7. Contact form and email
If you use our contact form or write to us by email, we process the details you provide (such as your name, email address, property or company name, and your message) in order to handle your enquiry. Form submissions are transmitted through a Cloudflare Worker and sent on via our email service provider Twilio SendGrid (Twilio Inc., USA) to our inbox; transfers to the USA are safeguarded by the EU Standard Contractual Clauses. Legal basis: Art. 6 (1)(b) GDPR where it concerns a contract or pre-contractual steps, otherwise Art. 6 (1)(f) GDPR (legitimate interest in responding to enquiries). We delete this data once it is no longer required and no statutory retention periods apply.
8. Social media links
We link to our Instagram profile. These are plain links: no social media plugins or embeds are integrated on this site, so visiting snippets.media transmits no data to Instagram. If you follow the link and visit our profile, your data is processed by the platform operator (Meta Platforms Ireland Ltd.) under its own privacy policy, over which we have no control.
9. Client services
When we deliver content to a client, we provide a media delivery hub for downloading the produced files and, as an optional add-on only, we may use a social media management tool (Metricool) to schedule and publish content on the client's behalf. This processing takes place within the respective client engagement and on the documented instructions of that client. It is not connected to your visit to this website.
10. Access by AI training crawlers
This website is open to AI training crawlers operated by major model providers (including GPTBot by OpenAI, ClaudeBot by Anthropic, PerplexityBot, and Google-Extended by Google). Content published publicly on this site may be collected by these providers and used to train, or to ground answers from, their language models. Access can be controlled per provider through this site's robots.txt. If, as a data subject, you object to the processing of your personal data published on this site for AI training purposes, contact us at hey@snippets.media and we will adjust the crawler access rules or the content concerned.
11. Your rights
Under the GDPR you have the right to:
- access your personal data (Art. 15)
- rectification (Art. 16) and erasure (Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interest (Art. 21)
- withdraw any consent at any time, with effect for the future
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the EU member state of your residence or place of work. The authority competent for us is the State Commissioner for Data Protection and the Right to Inspect Files Brandenburg (LDA Brandenburg), lda.brandenburg.de.
12. Changes to this policy
We may update this policy to reflect changes to our services or to legal requirements. The version published here always applies.