We process as little data as possible.

Hosting & server logs

This website is served via Netlify (Netlify, Inc., USA). When you access it, the hosting provider automatically processes technical access data (incl. a shortened IP address, date and time, the address requested, the browser used). This data is technically necessary to deliver the site and ensure its stability and security. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). For the transfer to the USA we rely on the EU Commission's standard contractual clauses.

Cookies

We use only technically necessary cookies — no tracking or marketing cookies. That's why there is no cookie banner. Specifically:

• dpat-entered — remembers that you confirmed the notice on your first visit, so it doesn't reappear every time.
• dpat-vnr — stores your (anonymous) visitor number, so the visitor counter doesn't count up again on a return visit. Only a small number is stored, no personal data.

The legal basis is § 25 (2) TTDSG (technically necessary storage) or our legitimate interest (Art. 6(1)(f) GDPR).

Visitor counter

We count the number of visits as a plain total (a value that counts up). No IP addresses and no personal data are stored — only the anonymous number in your browser mentioned above, plus a total counter on our server.

Wall & guestbook

When you leave an entry on the wall, we process the data you voluntarily provide: a name (a nickname is enough), your message and optionally an image. After a review by us, this content is displayed publicly on the site. Please don't provide any sensitive personal data there, and only upload images to which you hold the necessary rights and on which no people are identifiable without their consent.

Before uploading, images are resized in your browser and metadata (e.g. EXIF location data) is removed. Storage takes place on our own server at Hetzner (Hetzner Online GmbH, Germany). The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by submitting. You can request the deletion of your entry at any time, informally by e-mail.

Event sign-up & newsletter

When you sign up for an event, we store your first and last name, your email address, the event, whether you want the newsletter, and the time and status of your sign-up on our server at Hetzner (Germany). You are signed up right away and get an email with the details. We only use the address to send you information and updates about this event. The legal basis is your consent (Art. 6(1)(a) GDPR). You can cancel at any time via the link in the email. We delete sign-up data once we no longer need it after the event.

We send the emails via Brevo (Sendinblue GmbH, Berlin, Germany). The newsletter needs a separate confirmation: only if you ticked it and then click the confirmation link in the email (double opt-in), Brevo stores your address in our newsletter list. Every newsletter contains an unsubscribe link.

You can also sign up for the newsletter without an event, in the footer of every page. We then only send a confirmation email via Brevo; we do not store your address beforehand. Only when you click the link in it does Brevo add your address to our newsletter list. If you don't click, nothing is stored. The legal basis is your consent (Art. 6(1)(a) GDPR).

Event suggestions

If you suggest an event, we store your name, email address and the details of your idea on our server at Hetzner (Germany). We only use them to look at your suggestion and get back to you. The legal basis is your consent (Art. 6(1)(a) GDPR). We delete the suggestion once it has been dealt with, at the latest after twelve months.

Clapping in the journal

When you clap for a journal post, we only store the total number of claps for that post. Your own number of claps is kept in your browser (local storage) so you don't clap more than 50 times. It never leaves your device and contains no personal data.

Spam protection (Cloudflare Turnstile)

To protect our forms against automated abuse, we use Cloudflare Turnstile (Cloudflare, Inc., USA) — a data-minimising alternative to classic captchas. In the process, technical data (incl. IP address and browser information) is transmitted to Cloudflare to check whether the request comes from a human. The legal basis is our legitimate interest in preventing spam and abuse (Art. 6(1)(f) GDPR).

Your rights

Under the GDPR you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21). You can withdraw any consent you've given at any time with effect for the future. Just contact hi@dont-post-about-this.de.

You also have the right to lodge a complaint with a data protection supervisory authority — for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, who is responsible for us.

Encryption

This site and the data transfer to our backend take place exclusively encrypted via HTTPS (TLS).