Privacy PolicyDatenschutzerklärung

Last updated: October 30, 2026

Summary

This website does not use cookies and does not track you across other websites. It counts visits anonymously to see which pages are read, and it uses your details from the contact form only to reply to you.

Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is:

Yair Morr (MORR Design)
Berlin, Germany
Email: hey@yairmorr.com

Hosting and server logs

This website is hosted by Vercel Inc. (USA). When you open a page, your browser sends technical data that the server needs to deliver it: your IP address, the date and time, the page requested, the referring page, and your browser and operating system. Vercel keeps this in short-lived server logs to run the site and protect it from abuse.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website).

Visitor statistics (Vercel Web Analytics)

I use Vercel Web Analytics to see how many people visit, which pages they read, where they came from (for example a search engine or LinkedIn), and their country, device type and browser. It sets no cookies and stores nothing on your device. Visits are counted with a temporary identifier calculated from the request, which is reset every 24 hours, so you cannot be recognized across days or across other websites. I only see aggregated numbers, never individual visitors.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding how the website is used and improving it).

Performance measurement (Vercel Speed Insights)

Vercel Speed Insights measures how fast pages load in real browsers (for example loading time and layout stability), together with the page address and device type. It sets no cookies and is used only to keep the site fast.

Legal basis: Art. 6(1)(f) GDPR.

Images and videos (Cloudflare)

Large images and videos are delivered from media.yairmorr.com, which runs on Cloudflare, Inc. (USA). To send you these files, Cloudflare necessarily processes your IP address and technical request data.

Legal basis: Art. 6(1)(f) GDPR (fast, reliable delivery of media).

Contact form and email

If you use the contact form, I receive your name, your email address and your message. The form is delivered to my inbox by email through the email service Resend (USA). If you email me directly, I receive the same kind of information.

I use these details only to reply to you and, if we work together, to prepare and carry out the project. I delete them once they are no longer needed, unless tax or commercial law requires me to keep business correspondence for longer (in Germany usually six years).

Legal basis: Art. 6(1)(b) GDPR (steps before a possible contract) and Art. 6(1)(f) GDPR (answering enquiries).

Links to other websites

This website links to Calendly (for booking a call), LinkedIn, Dribbble and Instagram. These are plain links: no data is sent to those services until you click one. Once you are on their website, their own privacy policies apply.

Transfers outside the EU

Vercel, Cloudflare and Resend are based in the USA. Where a provider is certified under the EU-U.S. Data Privacy Framework, the transfer relies on the European Commission’s adequacy decision for it; otherwise it is covered by the EU Standard Contractual Clauses. I have data processing agreements with these providers.

Cookies and storage on your device

This website does not set cookies and does not store information on your device, so no consent banner is needed.

Your rights

Under the GDPR you have the right to:

• get a copy of the personal data I hold about you (Art. 15)
• have it corrected (Art. 16) or deleted (Art. 17)
• restrict how it is used (Art. 18)
• receive it in a portable format (Art. 20)
• object to processing based on legitimate interest, for reasons arising from your situation (Art. 21)

To use any of these rights, email hey@yairmorr.com. You can also complain to a data protection authority. The one responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information (datenschutz-berlin.de).

You are not required to give me any personal data. Without your email address, though, I cannot reply to a message. There is no automated decision-making or profiling on this website.

Changes

I update this policy when the website changes. The date at the top shows the latest version.