Privacy

This site deliberately avoids any data processing beyond what is technically necessary to operate it.

No cookies, no tracking, no ads

This documentation site sets no cookies, embeds no analytics or tracking services and shows no ads. No profiles are built and no personal data is passed to third parties.

Server logs

When the pages and the API are accessed, the hosting produces technically necessary server logs (for example IP address, time of the request, requested resource, user agent). This data serves secure and stable operation and the prevention of abuse. This data is not combined with other data sources.

Hosting

Operation takes place on a server in Germany (Nuremberg) at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. A data processing agreement under Art. 28 GDPR is in place with the provider.

Content delivery network (Cloudflare)

For secure and performant delivery and to mitigate attacks, I use the CDN of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Cloudflare processes the IP address of the request. Transfer to the USA is safeguarded by the EU Standard Contractual Clauses. Cloudflare is certified under the EU-US Data Privacy Framework.

Reach measurement (technical, no cookies)

To detect active API users and to prevent abuse, hourly counts are kept on the server (IP address, user agent and the most recently requested path). This data is held in a volatile store (Redis) and automatically deleted after at most three hours. No cookies are set and no cross-device profiles are built. This measurement only concerns API requests, not visits to these documentation pages.

Operational notifications (ntfy)

To monitor API operation I send technical event notifications (including the requesting IP address, the user agent and the requested path) to the push notification service ntfy.sh. This too only concerns API requests, not visits to these documentation pages.

Legal basis

The legal basis for the processing described above is Art. 6(1)(f) GDPR (legitimate interest in the secure, stable and abuse-free operation of the service). For contact by email the legal basis is Art. 6(1)(b) and (f) GDPR.

Contact

If you contact me by email, I process the transmitted data solely to handle your request. Contact: [email protected].

Your rights under the GDPR

You have the rights to information, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a data protection supervisory authority. For any request, reach me at [email protected].

Controller

The controller for the processing is Khaled Cherif. The full provider details are in the Imprint.