Privacy Policy

Last updated: 2026-07-18. This Privacy Policy explains how Daniel Ensminger, trading as x70 (“we”, “us”, “our”), processes personal data when you use https://design.x70.one (design guidelines, brand assets CDN, and related pages), in line with the EU GDPR and German data protection law (BDSG).

1. Controller

The controller responsible for processing is:

Daniel Ensminger
x70
Altheimer Eck 15
80331 München
Germany
Email: contact@x70.one

See also our Imprint (Impressum).

2. Categories of personal data

• Newsletter data: email address and subscription status if you opt in to brand or product updates.
• Technical data: IP address, browser type, device information, pages visited, and referrer when analytics are active.
• CDN / hosting logs: standard edge request logs generated when assets or pages are served.

3. Purposes and legal bases

• Sending newsletters only with your consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time.
• Hosting the design system and CDN (Art. 6(1)(f) GDPR — legitimate interest in operating and securing public brand assets).
• Analytics (PostHog, Vercel Analytics) only after you consent via our cookie banner (Art. 6(1)(a) GDPR).
• Security and abuse prevention (Art. 6(1)(f) GDPR).

4. Cookies and similar technologies

We use strictly necessary storage for preferences (including cookie consent and theme). Optional analytics run only if you click “Accept all”. You can change your choice via “Cookie settings” in the footer.

5. Recipients

• Vercel Inc. — hosting and edge delivery
• Resend, Inc. — newsletter email (if subscribed)
• PostHog, Inc. — product analytics (consent-based)

We do not sell your personal data.

6. International transfers

Some providers are based outside the EEA. Where transfers occur, we rely on appropriate safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses (SCCs).

7. Retention

• Newsletter: until you unsubscribe or we delete the list entry.
• Analytics: according to tool configuration, only while consent remains valid.
• Server / CDN logs: short periods needed for security and troubleshooting.

8. Your rights

Under the GDPR you may request access, rectification, erasure, restriction, portability, and objection, and withdraw consent at any time. You may lodge a complaint with Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) or your local authority. Contact: contact@x70.one.

9. Changes & contact

We may update this policy; the “Last updated” date will change when we do. Questions: contact@x70.one. Related: Terms of Service · Imprint.