Who is responsible
The controller within the meaning of the General Data Protection Regulation is the provider named in the legal notice. The details are not repeated here, so that there is only one place to keep up to date.
What this site does not do
This website is static. It sets no cookies. It writes nothing to local storage or session storage and reads nothing from your device. It embeds no third-party content: the typefaces and every image are served from this domain, and there is no map, no video player, no chat widget and no advertising.
There is no account. You can type in two places, the search field of the command palette and the idea composer on /ideas, and neither sends anything: the palette filters a list that is already in the page, the composer puts your answers together in your browser, and both forget what you typed when you leave the page. Only when you press "Open on GitHub" does your browser go to GitHub, with the text in the address of that page. Nothing you type reaches this site or its operator.
Because nothing is stored on or read from your device, Section 25 TDDDG does not apply. There is no consent to give and none to withdraw.
Hosting and server logs
This website is served via Cloudflare Workers. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When a page is requested, Cloudflare processes technical connection data:
- IP address of the requesting device
- date and time of access
- the address requested
- the browser and operating system identifier transmitted (user agent)
This data arises unavoidably for technical reasons; without it the page cannot be delivered. It serves delivery, operational security and the prevention of attacks. The legal basis is the legitimate interest in providing this service securely and reliably (Art. 6 (1) (f) GDPR). It is not combined with other sources and is not evaluated for advertising purposes.
Reach measurement
This site uses Cloudflare Web Analytics, provided by Cloudflare, Inc. It counts page views and measures how fast the page loads.
It sets no cookies and stores nothing on your device. Instead, your IP address, user agent and further request headers are hashed on the server and discarded; the hash is used to tell one visit from another and cannot be traced back to you. Recorded are page views, referrer, country, browser, operating system and performance measurements. Query strings are not logged. The data is kept for six months.
The legal basis is the legitimate interest in knowing whether this site is read and whether it loads properly (Art. 6 (1) (f) GDPR). Since nothing is written to or read from your device, this does not require consent under Section 25 TDDDG.
Processing on our behalf and transfer to the USA
Cloudflare processes the data described above as a processor under a contract pursuant to Art. 28 GDPR. This may involve a transfer to the USA. For that case, the Standard Contractual Clauses of the European Commission pursuant to Art. 46 (2) (c) GDPR apply in addition. Cloudflare is also certified under the EU-US Data Privacy Framework.
Links to other sites
This site links to GitHub, Discord, LinkedIn, wordscript.dev, pixdose.com, pordaro.com and the other SW labs sites. Those are links, not embeds: nothing is requested from those hosts until you follow one, and this site transmits nothing to them before you do. Once you are there, the privacy policy of that provider applies, not this one.
The link "Open on GitHub" in the idea composer carries your answers in its address, so that GitHub can fill in the new discussion. GitHub receives them when you follow that link, and you decide on GitHub whether to post them.
Your rights
You have the right at any time to:
- access to the data processed about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to the processing (Art. 21 GDPR)
To exercise these rights, contact the email address given in the legal notice.
Right to object
Where data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you may object to that processing at any time on grounds relating to your particular situation (Art. 21 GDPR).
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the Bavarian Data Protection Authority (BayLDA) in Ansbach.