Privacy

This site sets no cookies, loads nothing from third-party servers and contains no scripts or trackers. That's why there is no cookie banner. Like any web server, though, it receives access data when you visit. Here is what happens to it.

Controller

Florian Schmidt, reachable at webmaster [at] wozise.de.

This website

The pages are static HTML files. Font, images and stylesheet are served from the same server; there is no embedded third-party content. Nothing is stored in your browser.

Server and logs

The site runs on a self-hosted server in Germany. The web server itself keeps no access logs. In front of it sits a reverse proxy that logs IP address, time, requested URL, status code, amount of data sent and browser identifier for every request. These logs are deleted after 35 days at the latest, error logs, which may also contain IP addresses, after 77 days at the latest. The purpose is secure and reliable operation, legal basis Art. 6(1)(f) GDPR.

Access statistics

From the reverse proxy's logs, a self-hosted program builds access statistics: how much data was served per domain, path, time of day, type of program (browser, app, bot) and country. The country is looked up from the IP address on the server itself; the address is not sent to anyone for this. IP address, program type and requested paths are deleted after 90 days; after that only hourly totals without IP addresses remain. The statistics help to spot load and abuse (Art. 6(1)(f) GDPR). There are no cookies, no recognition across visits and no sharing with third parties.

Protection against attacks

The CrowdSec software analyses the reverse proxy's logs for typical attack patterns, such as mass probing of URLs or login attempts. Suspicious IP addresses are blocked for a limited time. Only in that case are the IP address, time and type of attack reported to CrowdSec SAS, 20 rue Maurice Arnoux, 92120 Montrouge, France, which compiles a shared blocklist of known attackers. Ordinary visits are not reported. The legal basis is the legitimate interest in fending off attacks (Art. 6(1)(f) GDPR).

External links

Links lead to GitHub, PayPal, F-Droid, the Snap Store and the individual app websites, among others. Once you follow them, you leave this site and the provider's terms apply. A contribution via PayPal is voluntary; payment data is processed solely by PayPal.

The apps

What each app processes is described on its project page and in its repository. None of the apps has a user account or sends usage data to me.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR), and the right to lodge a complaint with a data protection authority. You may object at any time to processing based on legitimate interests.