PRIVACY.

Controller

Name

Mahlwerk Kollektiv für Musik & Kultur

ZVR number

1263062876

Address

Hackengasse 7/9
1150 Wien
Austria

Privacy contact

[official privacy contact email to confirm]

Services Loaded in the Visitor's Browser

The website is a static Astro site served through Cloudflare Pages. When a page is opened, Cloudflare receives the normal technical request data needed to deliver the site, such as IP address, request URL, time, browser request headers and security-related metadata.

The site loads a first-party script from /scripts/analytics.js. It sends selected page and click events to the first-party endpoint /api/analytics-event. The stored event data is limited to timestamp, event type, release slug, artist slug, event slug, platform or destination where relevant.

The custom analytics event table does not store IP addresses, user IDs, cookies, fingerprints, full user agents or profiles. The site code does not set cookies and does not use localStorage or sessionStorage.

The homepage can load release data from the MAHLWERK release-sync Worker at mahlwerk-release-sync.mahlwerkmoves.workers.dev. That request returns release metadata and platform links.

Cloudflare Web Analytics is documented in the repository as responsible for normal page views and performance. The Astro source does not contain a hard-coded Cloudflare Web Analytics script, so MAHLWERK should confirm whether it is enabled in the Cloudflare dashboard.

Track Analyzer

The analyzer page decodes and measures selected audio files locally in the visitor's browser. The audio file is not uploaded to MAHLWERK by the analyzer code.

If a visitor uses the copy-report button, the generated text is written to the visitor's clipboard through the browser's clipboard API.

Server-Side Release Systems

MAHLWERK uses a scheduled Cloudflare Worker to prepare the public release feed. That Worker can request the MAHLWERK SoundCloud RSS feed, search Deezer, check the MAHLWERK Bandcamp page and call the MusicLink API when an API key is configured.

These release-sync requests happen server-side. Visitors do not contact SoundCloud, Deezer, Bandcamp or MusicLink directly because of the sync process. The public result is stored as release metadata in Cloudflare KV and as a static fallback cache in the repository.

Custom click and page events are stored in Cloudflare D1 through the first-party Pages Function at /api/analytics-event.

External Links

Release, streaming, shop and ticket links can lead to external services, including SoundCloud, Bandcamp, Spotify, Apple Music, YouTube Music, Deezer, TIDAL, Amazon Music and ticket providers configured for events. These services receive data once a visitor follows the link. Their own privacy terms then apply.

Cookies and Identifiers

The website source reviewed for this page does not set cookies and does not create visitor identifiers in browser storage. Cloudflare may still process technical request data for hosting, security, delivery and any enabled analytics features.