Privacy Policy

You can use this website without providing any personal data. It sets no tracking cookies, embeds no content from third parties and shows no ads. The only personal data processed is the technical access data described below.

1. Controller

The controller responsible for data processing on frametrail.org within the meaning of the EU General Data Protection Regulation (GDPR) is:

Joscha Jäger
Mail:
Postal address: see Imprint

The competent supervisory authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

2. Hosting and server log files

This website runs on a server rented from STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, which processes data on our behalf under a data processing agreement (Art. 28 GDPR).

Whenever you open a page, the web server automatically records the following access data in log files:

  • your IP address,
  • the date and time of the request,
  • the requested page or file,
  • the page you came from (referrer),
  • your browser and operating system (user agent),
  • the access status (e.g. file transferred, file not found) and the amount of data transferred.

We need this data to deliver the website to you and to keep it secure and stable, for example to detect attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). The log files are deleted after 7 days.

3. Web analytics with Matomo

Instead of the usual analytics providers, this website uses Matomo, an open source web analytics software, to compile statistics about how the site is used, so that we can improve it. Matomo runs on our own server (stats.linked.video, also hosted by STRATO). The data is not passed on to third parties.

Matomo is set up to collect as little data as possible:

  • It sets no cookies and stores no information on your device.
  • Your IP address is shortened by two bytes before it is stored (e.g. 192.168.xxx.xxx).
  • It does not probe your browser for plugins or screen resolution.

Matomo records the pages you visit and when, the page you came from, your browser, operating system and device type (derived from the user agent), your browser language and your approximate location (country), derived from the shortened IP address. This makes it practically impossible to trace a visit back to you, although it cannot be ruled out completely in individual cases.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is to understand how the website is used and to improve it. Raw visit data is deleted after 180 days. After that, only aggregated statistics are kept.

Opt out of Matomo

You can object to Matomo counting your visits at any time. If you remove the tick below, your browser stores a cookie named mtm_consent_removed for frametrail.org, which tells Matomo not to record your visits. The cookie stores nothing but your objection. If you delete your cookies, the opt-out is gone and you need to opt out again.

4. Contacting us by email

If you send us an email, we process your email address and the contents of your message only to answer your request. The legal basis is Art. 6(1)(f) GDPR. We delete your message once it is no longer needed for that purpose and no legal retention period applies.

5. No other cookies, third-party content or tracking

Apart from the opt-out cookie described above, this website sets no cookies. Fonts, scripts, images and videos are served from our own servers; we do not embed content from social networks, video platforms or other third parties. Links to external websites (e.g. GitHub) only take you there when you click them; from then on, the privacy policy of that website applies.

6. Your rights

You have the right to access the personal data we store about you (Art. 15 GDPR), to have it corrected (Art. 16 GDPR) or deleted (Art. 17 GDPR), to restrict its processing (Art. 18 GDPR), to data portability (Art. 20 GDPR) and to object to processing based on legitimate interests (Art. 21 GDPR). To exercise these rights, write to the email address above. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the BayLDA named above.

We do not use automated decision-making or profiling.


Last updated: 23 October 2026