Privacy Policy

Last updated: February 2026

Controller

Robin Gramb Im Soppen 3, 88639 Wald Germany Email: [email protected]

Data protection officer

No data protection officer is required pursuant to § 38 BDSG.

Server logs (nginx)

Each visit to the website triggers server-side logging of: date/time, IP address, requested URL, HTTP method, status code, user agent.
Purpose: Operating the website, IT security, error analysis Legal basis: Art. 6(1)(f) GDPR (legitimate interest) Retention: 14 days (logrotate: daily rotation, 14 compressed archives).

Email notifications

You can subscribe to a newsletter and/or launch notifications on this website.
Data processed: Email address, notification type (newsletter / launch), language preference, registration timestamp Legal basis: Art. 6(1)(a) GDPR (consent) Retention: until consent is withdrawn Withdrawal: at any time by emailing [email protected] with your registered email address Third-country transfer: not intended; data is stored exclusively on the hosting infrastructure described below (Oracle OCI, EU region).

Name suggestions

You can submit suggestions for the project name via the form.
Data processed: Suggested name (required), optional description, optional submitter name, IP address (for abuse prevention/rate limiting), timestamp Legal basis: Art. 6(1)(f) GDPR (legitimate interest in abuse prevention and operation) Retention: until manually deleted by the operator or project discontinuation Note: Submitted suggestions are displayed publicly. Do not enter your name if you wish to remain anonymous. Third-country transfer: not intended.

Voting & local storage

To vote on name suggestions, the following data is stored in your browser's local storage (localStorage) — no cookies:

Key	Purpose	Storage	Lifetime
`rc-lang`	Language preference (DE/EN)	localStorage	until manually deleted
`rc-voter-id`	Anonymous voter ID (random UUID) to prevent duplicate votes	localStorage	until manually deleted
`rc-about-votes`	Local voting history (which suggestion IDs were rated)	localStorage	until manually deleted

The UUID (rc-voter-id) is stored server-side alongside cast votes to prevent duplicate voting.
Legal basis: § 25 para. 2 no. 2 TTDSG (technically necessary for the requested function); a consent banner is therefore not required. Server-side storage of the UUID: Art. 6(1)(f) GDPR (legitimate interest in voting integrity).
You can delete these entries at any time via your browser's developer tools (Application → Local Storage).

DNS services (Cloudflare)

Service: Cloudflare, Inc. — used exclusively as an authoritative DNS nameserver for the domain. HTTP traffic is not routed through Cloudflare (no reverse proxy, no CDN).
Purpose: Domain name resolution; Cloudflare provides the operator with automated DNS query analytics (e.g. query volume, query types, geographic distribution of resolvers).
Data processed: Queried domain name, IP address of the requesting DNS resolver (typically the ISP's resolver, not the end user's IP directly), query type, timestamp. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable domain resolution and operation) Processing agreement: Cloudflare Customer DPA including EU Standard Contractual Clauses (SCC). — DPA: cloudflare.com/cloudflare-customer-dpa/ — SCC: cloudflare.com/cloudflare-customer-scc/
Third-country transfer: Cloudflare operates globally distributed nameservers (including EU/EEA and USA). DNS queries may be routed to any Cloudflare node. Transfers rely on DPA/SCC.
Cookies: As no reverse proxy is in use, Cloudflare sets no cookies on this website.

TLS/HTTPS

All connections to the website are encrypted via HTTPS (TLS); certificates are managed server-side in nginx.

Hosting (Oracle Cloud Infrastructure)

The hosting infrastructure runs on Oracle Cloud Infrastructure (OCI) (compute/network; "Always Free"). Data processing agreement: Oracle DPA in accordance with Art. 28 GDPR (June 2025). Public version: oracle.com/contracts/docs/data-processing-agreement-oracle-services-060225.pdf
Third-country transfer: not intended; operation takes place in an EU region. Should a transfer be required, it will only occur under Art. 44 et seq. GDPR (e.g. EU standard contractual clauses).

External content / third parties

Apart from Cloudflare (DNS) no external analytics, marketing, or font services (e.g. Google Analytics, Google Fonts, reCAPTCHA) are embedded.

Data subject rights

Pursuant to Art. 15 et seq. GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection under Art. 21 GDPR.
Contact: [email protected]

Withdrawal of consent

Consent (in particular for email notifications) may be withdrawn at any time with effect for the future — by email to [email protected], quoting your registered email address.

Right to lodge a complaint

Supervisory authority: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW).

Automated decision-making / profiling

Does not take place.

Changes to this privacy policy

This policy is updated when technical or organisational changes require it. The date indicated above ("Last updated") is authoritative.