Legal · LF BIOS Productions

Privacy policy

Effective 9 August 2026

This policy explains what personal data LF BIOS Productions handles through bios.ninja, why we handle it and the choices available to you.

Controller and contact

LF BIOS Productions is the controller for the processing described here. Privacy and data-rights requests can be sent to [email protected].

Data we handle

The public site has no account system, payment form or contact form. We do not sell personal data and we do not use it for automated decisions with legal or similarly significant effects.

Basic request and security data, such as IP address, browser information, requested URL, time and server or CDN logs.
Aggregated, cookieless traffic information from Cloudflare Web Analytics.
Google Analytics measurement data only after you select Allow analytics.
Your analytics choice, stored in your browser so the site can remember it.
Information you choose to send by email, including your address, message and any files or project details you provide.

Purposes and legal bases

Security, fraud prevention and reliable delivery: our legitimate interests in protecting and operating the site.
Cookieless, aggregated audience measurement: our legitimate interests in understanding whether the site works and which public pages are used.
Google Analytics: your consent. It is not loaded unless you allow it, and you may withdraw that consent through Privacy choices in the footer.
Enquiries and commission discussions: steps requested before a contract and our legitimate interests in answering messages and managing business correspondence.
Records required by law: compliance with legal obligations.

Cookies, local storage and analytics choices

Necessary browser storage remembers whether you allowed or declined optional analytics. Google Analytics remains blocked until you consent. Cloudflare Web Analytics is used without cookies or persistent cross-site identifiers. You can reopen Privacy choices from the footer at any time. Withdrawing consent stops future Google Analytics collection and the site attempts to remove its first-party analytics cookies.

Recipients and international transfers

Hosting, CDN, security, analytics and email providers process limited data for us. These may include Cloudflare, Google when you consent, our hosting provider and our email provider. Some processing may occur outside your country. Where GDPR transfer rules apply, we rely on an adequacy decision, approved contractual safeguards or another lawful transfer mechanism. We disclose data to authorities only where law requires it.

Retention

Security and access logs are kept only as long as needed to detect abuse, investigate incidents and maintain the service. Enquiry correspondence is normally kept until the matter is resolved and then for up to 24 months, unless a contract, dispute or legal duty requires longer. Your consent choice remains in your browser until you change it or clear site data. Analytics retention follows the configured provider settings and is reviewed periodically.

Your GDPR rights

Where the GDPR applies, you may request access, correction, deletion, restriction or portability of your personal data. You may object to processing based on legitimate interests and withdraw consent at any time without affecting earlier lawful processing. We may need to verify your identity before completing a request. You may also complain to the data-protection authority where you live or work, or where you believe an infringement occurred.

Minors

The site is for adults and is not directed to minors. Do not send us personal data if you are under the applicable age of majority. If we learn that we received a minor's data, we will delete it where required.

Changes

We will update this policy when our processing or the law changes. Material changes will be identified on this page. The effective date appears above.