Privacy Policy

1. Controller (Verantwortlicher)

The controller responsible for processing personal data under the GDPR / DSGVO is:

Nikita Aul

An der Teichbreite 11

38448 Wolfsburg, Germany

E-Mail: [email protected]

2. Scope

This policy covers the website aull.dev. Each Android application published under the developer name Aull.DEV on Google Play has its own privacy policy, linked from its respective Play Store listing.

3. Data processed on this website

3.1 Server logs (Cloudflare)

This site is served via Cloudflare. When you access the site, Cloudflare automatically collects technical data including IP address, browser type, operating system, referring URL, and timestamp. This data is processed for security purposes (DDoS protection, abuse prevention) under Art. 6(1)(f) GDPR (legitimate interest) and is automatically deleted after a short retention period defined by Cloudflare.

See Cloudflare's privacy policy: cloudflare.com/privacypolicy

3.2 Cookies

This website does not set its own cookies. Cloudflare may set technical cookies strictly necessary for security (e.g. __cf_bm). These are exempt from consent under § 25(2) No. 2 TDDDG, and the processing is based on Art. 6(1)(f) GDPR.

3.3 Email correspondence

If you contact us via [email protected], your email address, name, and the content of your message are processed solely for the purpose of responding to your inquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / contract performance) or Art. 6(1)(f) GDPR (legitimate interest in responding). Emails are stored for up to 3 years for documentation purposes and then deleted.

Email is routed through Cloudflare Email Routing and Google (Gmail). Both providers process headers and content as part of mail delivery.

3.4 Analytics (GoatCounter)

This website uses GoatCounter, a privacy-friendly, open-source web analytics service. GoatCounter does not use cookies and does not store IP addresses, the full User-Agent, or any tracker ID. To estimate unique visits, it keeps a combination of site name, IP address, and User-Agent in memory for up to 8 hours, mapped to a randomly generated string; this mapping is never written to the database. After 8 hours no link to a person is possible. No personal profiles are built.

Data collected: page URL, referrer, screen size, country (derived from IP and discarded), browser language. Data is stored at GoatCounter (operated by Martin Tournoij, EU). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding aggregate site usage). No cookie consent banner is required, because no cookies and no persistent identifiers are used.

GoatCounter privacy policy: goatcounter.com/help/privacy

You can opt out of analytics by enabling "Do Not Track" in your browser - GoatCounter respects this signal.

3.5 No ads, no third-party tracking

This website does not use advertising networks, third-party tracking technologies, or social media trackers.

4. Recipients of data

Personal data are not shared with third parties except:

• Cloudflare, Inc. (USA / EU) - hosting, CDN, email routing - under a data processing agreement. Transfers to the USA are based on the EU-US Data Privacy Framework (Cloudflare is certified) with EU Standard Contractual Clauses as an additional safeguard.
• Google Ireland Limited - Gmail for inbound email forwarding. Any onward transfer to Google LLC (USA) is covered by the EU-US Data Privacy Framework and EU Standard Contractual Clauses.
• GoatCounter (Martin Tournoij, EU) - privacy-friendly analytics, no cookies, no personal data stored long-term.
• Tax advisors / authorities where required by law.

5. Your rights (Art. 15-22 GDPR)

You have the right to:

• Access (Art. 15) - request information about data we process.
• Rectification (Art. 16) - correct inaccurate data.
• Erasure (Art. 17) - request deletion of data.
• Restriction of processing (Art. 18).
• Data portability (Art. 20).
• Object (Art. 21) to processing based on legitimate interest.
• Withdraw consent at any time (Art. 7(3)).

To exercise these rights, contact: [email protected]

6. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. For Lower Saxony (our jurisdiction):

Die Landesbeauftragte für den Datenschutz Niedersachsen

Prinzenstraße 5, 30159 Hannover

lfd.niedersachsen.de

7. Changes to this policy

This privacy policy may be updated to reflect changes in our practices or legal requirements. The current version is always available at https://aull.dev/privacy.