Privacy Policy

Scope

This Privacy Policy applies to this website. For the desktop app there is a separate, more detailed document: the App Privacy Policy.

The MPE Insight desktop app collects no usage data. No analytics, no tracking, no advertising SDKs, no user account, and no login.

Images, videos, camera footage, and MIDI data are processed entirely on your computer and are neither stored nor transmitted. Depth estimation in the FORGE module runs entirely on the device and works offline. A crash report is written to a local text file and is never transmitted; the notice inside the app only shows you where the file is located.

What the app contacts depends on where you obtained it:

• Mac App Store and Steam versions: These versions make no network requests at all. They contain no licence check and no update check, and they do not generate or transmit any device identifier.
• Version purchased directly from this website: This version contacts two endpoints. When you activate your licence, your licence key and a device identifier are sent to Lemon Squeezy (api.lemonsqueezy.com) so that the licence can be bound to a device. The device identifier is a one-way hash derived from your computer name and user name; the names themselves are not transmitted. The app also contacts christophek.de to check whether a newer version is available. No usage data is sent in either case.

The processing described below therefore concerns your use of this website, not your use of the app.

1. Data Controller

Christophe Kalkau
Johannes-Drach-Str. 55A
97753 Karlstadt, Germany
Email: mail@christophek.de

2. General Information

Protecting your personal data is important to me. This website does not collect data without your knowledge. The following explains which data may be processed when you use this website, and the legal basis for such processing.

3. Hosting & Server Logs

This website is provided through an external hosting provider. Each time a page is accessed, technical access data may be stored automatically, including:

• IP address (anonymised or full, depending on the provider)
• Date and time of access
• Page or resource accessed
• Browser and operating system information

This data is processed solely to ensure the technical operation of the website and is not combined with other data. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

4. Google Analytics

With your consent, Google Analytics 4 (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) is used. The service uses cookies and similar technologies to collect information about how you use the website.

The following data may be processed:

• Pages visited and time spent on the website
• Source of the visit (referrer)
• Approximate location (country or region, not precise)
• Device and browser information

The IP address is anonymised before transmission. Google may disclose data to third parties; Google is certified under the EU-U.S. Data Privacy Framework.

Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time by clicking "Reject" again on this website, or by deleting the cookie_consent entry from your browser storage.

Further information: Google Privacy Policy

5. Newsletter / Contact Form

If you subscribe to the newsletter, your email address and, optionally, selected areas of interest (tags) are submitted to FormSubmit (formsubmit.co), a form service that forwards this information to me by email.

FormSubmit processes this data on my behalf for that purpose only. The data is used exclusively to send product updates about MPE Insight. It is not sold, and it is not passed on for any other purpose. You can withdraw your consent at any time by sending an informal email to mail@christophek.de.

Legal basis: Art. 6(1)(a) GDPR (consent).

6. External Services & Embedded Content

This website uses the following external services. Each entry states when the connection happens, because that is the part that matters: your IP address reaches the provider at that moment, and not before.

Loaded when you open a page

• YouTube video thumbnails (Google Ireland Limited, img.youtube.com). Pages that list videos show the preview image belonging to each video, and that image is fetched from Google's servers when the page is displayed. Your IP address is transmitted to Google at that point. The images are deliberately not copied onto this server: they follow the videos, and a local copy would silently go stale. No cookie is set by this request, and no player is loaded — see below.
• Lemon Squeezy (Lemon Squeezy LLC, assets.lemonsqueezy.com). The checkout script for the purchase overlay is loaded with the page. Lemon Squeezy is the seller of record for direct purchases; payment and invoicing run entirely on their side.

Loaded only when you click

• YouTube player (Google Ireland Limited). The embedded player is not loaded with the page. It is inserted only when you actually start a video, and it uses the youtube-nocookie.com variant, which does not set cookies for advertising purposes on load. Until you click, no connection to the player is made.
• Steam (Valve Corporation, shared.fastly.steamstatic.com). Some module clips are hosted on Steam's content network and are fetched when you open the corresponding preview, not when the page is displayed.

Not used, although you might expect it

Web fonts are served from this website itself. The Fraunces, Inter and IBM Plex Mono typefaces are hosted locally, so displaying a page does not establish any connection to Google Fonts and no IP address is transmitted for that purpose.

The same applies to the animation libraries. GSAP, Lenis and three.js were previously loaded from public content networks (cdnjs, unpkg). Since 2026-08-12 they are hosted on this website, so opening a page no longer contacts those providers at all.

7. Your Rights

Under the GDPR, you have the following rights with regard to me as the data controller:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)

To exercise your rights, please contact: mail@christophek.de

You also have the right to lodge a complaint with the competent data protection supervisory authority. For Bavaria, this is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

8. Changes to This Privacy Policy

This Privacy Policy may be updated if the technical infrastructure or the applicable legal requirements change. The "Last updated" date above indicates the currently applicable version.