Privacy

Controller

Controller for the processing of personal data on this website:

David Cole
Im Bachwinkel 11
66113 Saarbrücken
Germany
Email: hello@multiplicity.dev

Purpose of this website

multiplicity.dev is a professional website for editorial content, professional background information, and an Executive AI offer. The website provides:

• informational pages
• professional and editorial content
• contact options by email
• interest or registration inquiries for paid offers by email

Contact by email

If you contact us by email, we process the information you provide, such as:

• your name
• your email address
• your message
• any other information you choose to send

We process this data to respond to your inquiry and to handle any follow-up communication.

Legal basis:

• Article 6(1)(b) GDPR where the communication relates to pre-contractual steps or a contract
• Article 6(1)(f) GDPR for general business communication and response handling

Registration and paid offers

Registration for the current Executive AI cohort is closed. There is currently no active payment checkout on this website.

If you inquire by email about a current or future paid offer, personal data may be processed for:

• registration or interest-list handling
• pre-contractual communication
• billing and accounting if a paid arrangement is agreed separately
• fulfillment and customer communication

Legal basis:

• Article 6(1)(b) GDPR for contract performance and pre-contractual steps
• Article 6(1)(c) GDPR where retention is required by tax or commercial law
• Article 6(1)(f) GDPR for security and business administration

If a future web checkout or payment processor is added, this privacy notice and any required consent or legal information will be updated before that flow goes live.

Cookies and similar technologies

The website is intended to operate without non-essential analytics, marketing tags, or comparable third-party tracking technologies unless this privacy notice and any legally required consent mechanism are updated accordingly.

One project page (/projects/formative-grapher/) offers an embedded YouTube tutorial. The video is not loaded when you visit the page. A static preview image is shown instead, served from this site. Only if you explicitly click the play button does the embed load from YouTube’s privacy-enhanced domain (youtube-nocookie.com), which contacts Google’s servers and may set cookies on Google’s domains. If you do not click play, no request is made to YouTube or Google.

If non-essential analytics, advertising tools, embedded third-party services, or comparable tracking technologies are added later, this privacy notice and any legally required consent mechanism must be updated before those changes go live.

Reader comments

Paper pages on this site (/papers/*) may include a comment form where readers can submit a short public note on the article.

If you submit a comment, the following data is processed:

• your name (published alongside the comment if the comment is approved)
• your email address (optional; not published; used only if we need to follow up about the comment or its moderation)
• the text of your comment (published if approved)
• a salted hash of your IP address (not the IP itself), stored solely to rate-limit submissions and deter abuse
• the date and time of submission

Comments are not published automatically. Each submission is held for manual review. Only approved comments are displayed. Rejected or deleted comments are removed from storage.

The form is protected against automated abuse by Cloudflare Turnstile. Turnstile is configured in a mode that does not set cookies on visitors’ browsers. Turnstile may process technical data (including IP address and browser characteristics) to verify that a submission is not automated. This processing is provided by Cloudflare, Inc. under its own terms and privacy policy.

The site may send an internal moderation notification through Resend, Inc. when a new comment is awaiting review. These notifications are configured not to include the commenter’s name, email address, or comment body.

Legal basis:

• Article 6(1)(a) GDPR (consent) for publishing your name and comment, collected via the consent checkbox on the form
• Article 6(1)(f) GDPR for abuse prevention, rate limiting, and Turnstile verification

Retention: published comments are retained as part of the site’s public record until deletion is requested. Rejected or deleted submissions are removed from storage, including any associated IP hash. For comments that remain published, the salted IP hash is retained alongside the comment record to support ongoing rate limiting and abuse detection. Because the stored value is a salted one-way hash, it cannot be reversed to recover the originating IP address.

To request deletion of a comment you submitted, or to withdraw consent to publication, contact hello@multiplicity.dev.

Web fonts

This website uses the Newsreader and Roboto Mono typefaces. Web fonts are intended to be self-hosted and served directly from this site’s infrastructure, meaning no request to an external font provider (such as Google Fonts) is made when you visit a page.

If the technical implementation changes and fonts are loaded from an external provider, this privacy notice and any required consent mechanism will be updated before that change goes live.

Hosting and technical delivery

This website is hosted and delivered using Cloudflare services. In the course of operating and delivering the site, technical data may be processed, including for example:

• IP address
• request metadata
• browser and device information
• access logs
• security and performance data

This processing is used to provide the website securely and reliably.

Legal basis:

• Article 6(1)(f) GDPR for secure and reliable website operation

Email infrastructure

Business email is handled through Google Workspace. If you contact us by email, your communication is therefore processed through Google’s infrastructure for email delivery, storage, and administration.

Legal basis:

• Article 6(1)(b) GDPR where relevant to pre-contractual or contractual communication
• Article 6(1)(f) GDPR for efficient and secure business communications

Recipients

Personal data may be disclosed to service providers used to operate the website and business, in particular:

• Cloudflare for hosting and technical delivery
• Google Workspace for email handling
• Resend for internal comment-moderation notifications that do not include commenter contact details or comment text

Data may also be disclosed where legally required or where necessary to establish, exercise, or defend legal claims.

International transfers

Some service providers may process personal data outside the European Union or European Economic Area. Where this occurs, processing is expected to rely on an appropriate legal transfer mechanism, such as an adequacy decision or Standard Contractual Clauses, where required.

Retention

We retain personal data only for as long as needed for the relevant purpose, including:

• responding to inquiries
• performing contracts
• maintaining business records
• meeting legal retention obligations

Where statutory retention obligations apply, the relevant data may be stored for the legally required period.

Your rights

Under the GDPR, you may have the right to:

• access your personal data
• rectify inaccurate data
• erase data
• restrict processing
• object to processing
• receive data portability where applicable
• lodge a complaint with a supervisory authority

To exercise these rights, contact:

hello@multiplicity.dev

Mandatory provision of data

You are not generally required to provide personal data to browse the informational pages of this site. However, certain data may be necessary if you contact us or register for a paid offer.

Changes

This privacy notice may be updated if the site, business structure, processors, or legal requirements change.