Datenschutz
What this site collects, why, and how long we keep it. Shorter than most, because we collect very little.
Last updated
The short version
This site sets no cookies and loads nothing from ad or tracking networks. Our server keeps short access logs so the site stays up. The two forms store only what you type into them. When you buy an app, Polar runs the checkout, so your card details never reach us.
The rest of this page says the same thing in the detail the GDPR asks for.
Who is responsible (Verantwortlicher)
The controller for this website under the GDPR is:
Castor Pollux GmbHSterleyer Straße 623879 MöllnGermanyEmail: moin@timir.de. Anything about your data goes to that address. The full legal notice is in the Impressum.
Data protection officer (Datenschutzbeauftragter)
Julian Gebhard, at the address above. Email: moin@timir.de.
Server logs (Hosting)
Each time your browser loads a page, the server notes the request: your IP address, the date and time, the address requested, the page you came from and your browser's user agent. We need this to deliver pages, find errors and fend off attacks.
- Legal basis
- Art. 6(1)(f) GDPR. Our legitimate interest is a website that works and stays secure.
- Kept for
- Only as long as these purposes need, then deleted. Entries needed to investigate an attack are kept until that's done.
Fonts
Our fonts, Inter and Bricolage Grotesque, are served from our own server. Your browser doesn't contact Google or any other font service when it loads a page here.
The nominate form
The form that asks which subscription we should rebuild next takes one thing: the name of a subscription. We store that name and nothing that ties it to you. Please don't type personal details into it. Sending the form is an ordinary request, so the server logs above cover it too.
- What
- The subscription name you enter.
- Why
- To decide which app we build next.
- Legal basis
- A subscription name on its own isn't personal data. If you type personal details anyway, Art. 6(1)(f) GDPR: our interest in knowing what to build.
- Kept for
- As long as the list helps us plan. It's a list of product names.
The notify-me form
If you want an email when an app launches, you give us your email address and, when you sign up on an app's card, the app you're waiting for. Before we send anything else, we send one email with a confirmation link (double opt-in). If you don't click it, you won't hear from us again. We also store when you signed up and confirmed, as proof that you asked.
- What
- Your email address, and the app you asked about if there is one.
- Why
- To tell you when that app, or a new one, launches.
- Legal basis
- Your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time (Art. 7(3) GDPR) with the link in every email or by writing to us.
- Kept for
- Until we've sent the launch email you asked for, or until you withdraw consent. Addresses nobody confirms are deleted after 30 days.
Buying an app (Polar)
The Buy button takes you to a checkout run by Polar Software Inc. Polar is the merchant of record: it sells you the license, takes the payment (card payments go through Stripe), charges VAT, and emails your receipt and license key. Polar handles your name, email address, billing address and payment details as a controller in its own right, under Polar's privacy policy.
Polar shares with us what we need to support you: your email address, the app you bought, the order and your license key's status. Polar is based in the United States and stores data there; its privacy policy says it uses the EU Standard Contractual Clauses for that transfer.
After paying, Polar sends you back to our thanks page with a checkout reference in the address. We show it on the page so you can quote it to us. We don't store it.
- Legal basis
- Art. 6(1)(b) GDPR, to carry out the purchase you asked for.
- Kept for
- As long as tax and commercial law require order records to be kept.
Who else sees your data (Empfänger)
- Our hosting provider hosts the site and keeps the server logs, as our processor (Art. 28 GDPR).
- An email service sends the confirmation and launch emails, as our processor.
- Polar runs the checkout and license keys as merchant of record and its own controller.
We don't sell your data, and nobody else gets it unless a law makes us hand it over.
Your rights (Ihre Rechte)
For the data we hold about you, you can:
- find out what it is and get a copy (Art. 15 GDPR)
- have it corrected (Art. 16)
- have it deleted (Art. 17)
- have its use restricted (Art. 18)
- get it in a portable format (Art. 20)
- object to processing that rests on our legitimate interest (Art. 21)
- withdraw a consent at any time, from then on (Art. 7(3))
Email moin@timir.de and say what you'd like. We answer within one month, as the GDPR requires.
Complaints (Beschwerderecht)
If you think we handle your data wrongly, you can complain to a data protection authority (Art. 77 GDPR), for example the one where you live. The authority responsible for us is:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel
Changes to this page
When we change how we handle data, we update this page and the date at the top.