Privacy policy

Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Hosting

SnipAtlas runs on a cloud server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. All data stored by SnipAtlas, for example user accounts and requests, is kept there as well. The server is located in Germany. When you visit SnipAtlas, the server processes technically necessary data such as your IP address in order to deliver the page. The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest is providing the website securely and reliably. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

Server log files

On every request, the web server automatically stores the following information transmitted by your browser:

• IP address
• date and time of the request
• requested page or file
• status code and amount of data transferred
• page you came from (referrer)
• browser and operating system (user agent)

I need this data to keep the site running, find errors and fend off attacks. I do not combine it with other data and do not use it for statistics. The log files are deleted automatically after 14 days. The legal basis is Art. 6 (1) (f) GDPR.

Fonts and icons

The Geist font, the icons and the topic logos are stored on my own server and loaded from there. There is no connection to Google Fonts, content delivery networks or any other third-party servers. Your IP address is therefore not sent to anyone except my server.

Cookies

SnipAtlas sets no cookies for advertising, analytics or tracking. When you sign in, SnipAtlas stores a cookie with a sign-in token in your browser. It keeps you signed in so you do not have to sign in again on every visit. The cookie is deleted when you sign out, at the latest after 14 days. Without signing in, SnipAtlas sets no cookies.

This cookie is strictly necessary for signing in (§ 25 (2) no. 2 TDDDG), so no consent is required. The legal basis for processing is Art. 6 (1) (b) GDPR.

Settings in your browser (local storage)

So that SnipAtlas remembers your settings, the site stores the following in your browser's local storage:

• commands for Windows or Linux/Mac
• interface language

This information stays on your device and is not sent to me. You can delete it at any time in your browser settings. If you are signed in, your settings are also stored in your account (see user account). Storing it in the browser is strictly necessary for the function you requested (§ 25 (2) no. 2 TDDDG), so no consent is required. The legal basis for processing is Art. 6 (1) (f) GDPR.

User account

You can read all content on SnipAtlas without an account. You only need one for personal features. To register, you enter your email address and a password. The password is only stored as a hash, I cannot read it.

For your account, I store the following on the server:

• email address, password hash, whether the address is confirmed, a new address that is not confirmed yet, date of registration and of your last sign-in
• your favourites
• your progress in the guides
• your settings (commands for Windows or Linux/Mac, email when a request is answered)
• your requests with their status and my reply

The legal basis is Art. 6 (1) (b) GDPR, because I cannot provide the features of your account without this data. Only you can see and change your data. In your account you can change your email address and password and download all your data.

You can delete your account yourself at any time. All data belonging to your account is then deleted. If you do not confirm your email address within 7 days of registering, the account is deleted automatically.

Request form

When you write to me using the request form, I process the information you enter there: the type of request, your input in the fields (for example topic, description, example or source, and for bug reports optionally your browser and device) and your email address. The data is transmitted to my server in encrypted form and stored there as a request that only I can work on. I only use it to handle your request and reply to you, and I do not pass it on.

If you are signed in, I also store the request in your account. Under “My requests” you can then see its status and my reply.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR, which you give by ticking the checkbox in the form. You can withdraw it at any time with effect for the future. A short email is enough.

I automatically delete requests sent without an account 6 months after they have been dealt with, or earlier if you ask for it to be deleted or withdraw your consent. Requests in your account remain visible there until you delete your account. Statutory retention obligations remain unaffected.

Emails from SnipAtlas

SnipAtlas only sends you emails that you trigger yourself: a link to confirm your account when you register, and a notice if there already is an account for your address. Also a link to confirm a new email address when you change it, a link to reset your password when you request one, and a notification when I reply to your request and you have switched this on. I do not send newsletters or advertising. The legal basis for the emails about your account is Art. 6 (1) (b) GDPR, for the notification your consent pursuant to Art. 6 (1) (a) GDPR. You can switch it off in your settings at any time.

To send all emails from SnipAtlas, I use the Resend service of Plus Five Five, Inc., USA. Resend processes your email address and the content of the email for this purpose. The data may be transferred to the USA. Plus Five Five, Inc. is certified under the EU-U.S. Data Privacy Framework, so the transfer is covered by the European Commission's adequacy decision (Art. 45 GDPR). Standard contractual clauses are also in place (Art. 46 (2) (c) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with Resend.

Contact by email

When you email me directly, I process your email address and the content of your message in order to reply. The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest is answering your message. I delete it once your matter has been dealt with.

Encryption

SnipAtlas is only delivered over an encrypted connection (HTTPS with TLS). You can recognise it by “https://” in your browser's address bar. This prevents third parties from reading the data you transmit.

Your rights

You have the right at any time to:

• access the data stored about you (Art. 15 GDPR)
• have incorrect data rectified (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)
• withdraw your consent (Art. 7 (3) GDPR)
• lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the supervisory authority of Lower Saxony

To do so, simply email me at the address above.

Changes

I will update this policy whenever something changes on SnipAtlas that affects your data. The version on this page always applies.