← Back

Privacy Policy

Last updated: 21 September 2026

1. Data Controller

The data controller responsible for processing your personal data on this site is:

Bai Xu
c/o POSTFLEX PFX-008-567
Emsdettener Straße 10
48268 Greven
Germany

Email: hellobaixu@gmail.com

2. What data we collect

When you sign up via this site, we collect:

  • Your name
  • Your email address
  • The topics you've selected to hear about
  • Any optional free-text you provide in the "other" field
  • The timestamp at which you gave consent
  • A record of your consent
  • Your confirmation status (whether you've completed double opt-in)

3. Lawful basis for processing

We process your personal data on the basis of your explicit consent, in accordance with Art. 6(1)(a) GDPR. Your consent is confirmed via a double opt-in process: after submitting the form, you receive an email and must click the confirmation link before your subscription becomes active.

4. Purpose of processing

Your data is used solely to send you occasional personal updates from Bai Xu — for example, news about new YouTube videos, books, design tools, or design service availability. We do not use your data for any other purpose, and we do not share, sell, or rent it to anyone.

5. Email service provider

The confirmation email is sent via Lovable Cloud's built-in email service (operated by Lovable AB and its email infrastructure provider). Lovable Cloud acts as a third-party data processor on our behalf for the purpose of delivering this email.

Future update emails are sent from a separate tool, which will be disclosed here once it is selected. [TO BE COMPLETED — name and processor details of any future email tool used for ongoing updates.]

6. Where your data is stored

Your signup record is stored via Lovable Cloud, which is built on Supabase as a sub-processor. Data is hosted in the European Union [TO BE COMPLETED — confirm exact data centre region in Cloud → Settings].

7. How long we store it

We keep your data until you withdraw consent or request deletion. If you sign up but do not confirm your email within 14 days, your unconfirmed signup record is automatically deleted.

8. Your rights under GDPR

You have the right to:

  • Access the personal data we hold about you
  • Request rectification of inaccurate data
  • Request erasure of your data ("right to be forgotten")
  • Request data portability
  • Object to processing
  • Withdraw your consent at any time
  • Lodge a complaint with the supervisory authority — for Munich, this is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

To exercise any of these rights, email hellobaixu@gmail.com.

9. Cookies and tracking

This site does not set non-essential cookies and uses no analytics or tracking pixels. No cookie banner is required.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect any changes.