Privacy policy

As of October 2026 · The German version is authoritative.

This website is deliberately lean: no cookies, no tracking, no analytics, no advertising, no embedded third-party content (no external fonts such as Google Fonts, no videos, no social media buttons), no contact form and no newsletter. All fonts, images and files come from this website itself; the font is your device's system font.

1. Controller

2. Providing the website (hosting)

The website is delivered through Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, acting as processor (Art. 28 GDPR) under its Data Processing Addendum. Whenever a page is requested, Cloudflare necessarily processes:

• the IP address of the requesting device,
• date and time, the requested address, the amount of data transferred and the status code,
• browser information (user agent) and, if your browser sends it, the previously visited page (referrer).

Purpose: delivering the website, stability and protection against attacks (e.g. overload). Legal basis: legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Retention: Cloudflare keeps these log data only briefly for operation and security. I do not analyse access logs, create statistics or build visitor profiles.

Transfer to a third country: Cloudflare may process data in the USA. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR). In addition, the Commission's standard contractual clauses are part of the Data Processing Addendum (Art. 46 GDPR). More: Cloudflare's privacy policy.

3. Cookies and access to your device

This website sets no cookies and uses no comparable techniques (such as local storage or fingerprinting). No information is stored on or read from your device beyond what is technically necessary to deliver the page (§ 165(3) of the Austrian Telecommunications Act 2021). That is why there is no cookie banner.

4. Contact by e-mail

If you write to me@kaveyl.app, I process your e-mail address and the content of your message to answer it (Art. 6(1)(f) GDPR; for requests about a contract, Art. 6(1)(b) GDPR). The address is forwarded through Cloudflare Email Routing (Cloudflare, Inc., see above) to my mailbox at Google (Gmail; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); Google may process data in the USA and is also certified under the EU-US Data Privacy Framework. I keep messages only as long as needed to deal with them and delete them afterwards unless the law requires otherwise.

5. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Simply write to me@kaveyl.app.

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.

6. Other

There is no automated decision-making, including profiling. You are not obliged to provide data; without the technically necessary connection data, however, the website cannot be displayed. This privacy policy is updated when the website changes.