Privacy Policy

Controller within the meaning of the GDPR:

Dominik Heußen
In der Herrschaft 61
41515 Grevenbroich
Germany
Email: [email protected]

scweble.io is account, registry and statistics — nothing more. We process correspondingly little:

• WaitlistEmail address, time and language setting, to notify you at launch.
• Account (invited users)Email address, username, display name, language setting, subscription status, a password hash and — if you upload one — a downsized profile picture.
• Sign-inSession data and short-lived one-time codes, stored only as hashes, for verification and password reset.
• Connected devicesDevice name, platform, time of last use and an access token stored only as a hash, once you pair the app with your account.
• scweble entriesFor each scweble the app reports: title, short name and the address you published it at.
• Imprint detailsDetails for the imprint of your own scweble (e.g. name, address, contact, hosting provider), so the app can generate your bundle's legal texts from them.
• Server logsTechnically necessary log data for security and abuse prevention (including IP address, time, requested address).

scweble.io does not host scwebles and receives no copy of your content.

• Your scweblesDrawings, pages and images live locally on your device and in the bundle you export to your own webspace, to GitHub Pages or as a ZIP. They are not uploaded to us.
• Webspace credentialsThey live solely in your device's keychain and never reach us.
• iCloud (optional)If you turn on iCloud sync, your scwebles and connections live in your own iCloud Drive and the passwords in iCloud Keychain. That is your Apple account: we have no access to it, and Apple is not our processor.
• Visitors of your scwebleYou are the controller for them; the app generates a privacy policy of your own for that purpose.

Visit statistics are optional and off by default. If you turn them on, your published scweble sends the requested page address to scweble.io on each page view.

• What we storeDaily counters per scweble and page only.
• What we do not storeIP address and user agent are used only transiently for abuse and bot defence and are neither stored nor logged. No cookies are set and no visitor profiles are built.
• Our roleWe act as your processor (Art. 28 GDPR) under the data processing agreement you accept when turning the feature on.
• DeletionCounters are deleted after 13 months.

We only set technically necessary cookies: a session cookie while you are signed in (up to 30 days) and, where applicable, a cookie for the chosen language.

There is no tracking, no analytics or advertising service and no embedded third-party content; fonts are served from our own server. No consent is required for this (§ 25 (2) TDDDG).

• WaitlistConsent (Art. 6 (1) (a) GDPR) or pre-contractual measures (b).
• Account, devices, scweble entries, imprint detailsContract or pre-contractual measures (b).
• Security and server logsLegitimate interest (f).
• Statutory duties (e.g. retention)Legal obligation (c).

We use carefully selected processors within the EU, each under a data processing agreement:

• HostingHetzner Online GmbH (Germany).
• Email deliveryMailjet/Sinch (France, EU).

All personal data is processed exclusively in the EU. There is currently no payment processing; it will be added here once paid plans are activated.

• WaitlistUntil launch or until you withdraw, then deleted.
• Account, scweble entries, imprint detailsFor the lifetime of the account; after account deletion they are removed within a short period.
• Device accessUntil you remove the device.
• One-time codesExpire after a few minutes.
• Statistics counters13 months.

Statutory retention periods remain unaffected.

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw any consent given (e.g. for the waitlist) at any time with effect for the future, for example by email to [email protected].

You also have the right to lodge a complaint with a data protection supervisory authority; the authority responsible for the operator is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

Please send privacy questions to [email protected].