Privacy policy

1. Controller

Provider:

• Chris Leon Noltemeier
• 49152 Bad Essen
• Deutschland
• Email: chris.noltemeier@gmail.com

The controller under the GDPR is the operator named below as “Provider” (same details as the legal notice / Impressum).

For privacy requests, use the email address shown in the legal notice and put “Privacy” in the subject line.

We have not appointed a Data Protection Officer (DPO).

2. Scope

This policy applies to:

• this website at the domain shown in your browser and in the legal notice (landing page, blog, contact), and any later primary domain;
• the CrashReport mobile app (Android/iOS) where linked from stores or this site — technical details may differ from this web codebase and should be checked in the app project.

Third-party sites we link to have their own privacy notices.

3. What data we process

Website (as implemented in this codebase)

• Server and access logs from hosting: e.g. IP address, timestamp, requested URL, user agent. Purpose: operation, security, abuse detection. Legal basis: Art. 6(1)(f) GDPR.
• Contact form: name, email, message. Submitting opens a mailto hand-off; delivery then uses your email provider and ours. Purpose: handling your request. Legal basis: Art. 6(1)(b) or (f) GDPR.
• Newsletter: none — this item is omitted until a newsletter exists and is described here.
• Web analytics: this site loads Vercel Web Analytics (Vercel Inc., including potential US processing). We do not operate our own marketing cookies on this site; the analytics service may still use cookies, local storage, or similar mechanisms as described by Vercel. No ad profiles are built; data is aggregated usage information. Legal basis: Art. 6(1)(f) GDPR. Details: Vercel’s privacy documentation. You can limit analytics in your browser where possible (extensions, blocking settings).

CrashReport mobile app

• Report content you enter (e.g. event details, people involved, vehicles, notes).
• Media such as photos and a sketch, if you capture them.
• Location data if you use location features and grant OS permissions.
• PDF: a report is typically generated on-device. Where files are stored or shared depends on your actions and OS permissions. For the described default use, report data is not automatically transmitted to us; if you actively send us content (e.g. by email), we process it to handle your request.

Technical note (app): this repository is mainly the website. Whether data stays only on-device, whether cloud sync, accounts, or third-party SDKs (e.g. crash reporting) exist must be verified in the app source and store listing, and this section updated if needed.

4. Purposes and legal bases

• Handling contact requests (Art. 6(1)(b) or (f) GDPR).
• Operating, securing, and measuring use of the website (Art. 6(1)(f) GDPR).
• Providing app features (Art. 6(1)(b) and/or (f) GDPR, depending on contract and feature).
• Consent where required for optional processing (Art. 6(1)(a) GDPR).

5. Recipients and processors

We do not sell personal data. Sharing is limited to the service providers below for running the site, or where you actively share content (e.g. emailing a PDF).

• Hosting and analytics: Vercel Inc. (site operation, server logs, Vercel Web Analytics).
• Email: delivery via the sender’s and recipient’s email providers (e.g. when you write to our contact address).

6. International transfers

Vercel may process data in third countries such as the United States. Where required, we rely on adequacy decisions and/or Standard Contractual Clauses under GDPR. See Vercel’s documentation for the current mechanism.

7. Retention

• Contact: until the conversation is completed plus a reasonable follow-up period; longer only if statutory retention requires it.
• Server logs: limited by the host — add a fixed number of days here after confirming with Vercel if you want to state one.
• App data: generally on the device until you delete it or remove the app, unless the app maintains server copies (see technical note in section 3).

8. Your rights

Where the GDPR applies, you may have the rights of access, rectification, erasure, restriction, objection, and data portability.

You may lodge a complaint with a supervisory authority.

9. Security

The site is served over HTTPS. We apply reasonable organisational access controls. No online service can guarantee absolute security.

10. Changes

We update this page when processing or legal requirements change. The date above marks the current version.