Privacy policy

1The short version

• This website sets no cookies and stores nothing in your browser.
• It counts visits with Umami, a statistics tool on the website’s own server. Umami stores no IP address and can’t recognise you on another day.
• The website loads nothing from other servers. The fonts are on its own server too.
• Server log files are deleted after 7 days.
• If you email me, I process your message to reply.

2Who is responsible

The controller under the General Data Protection Regulation (GDPR) is:

Noah Stroehl
Weiherstr. 12
91452 Wilhermsdorf
Germany
Email: support@spaceybot.de

I run this website and the Spacey Discord bot.

3When you visit this website

Each time you open a page, your browser sends data to the server that hosts the website. The server stores it in log files:

• IP address
• date and time of the request
• the page or file requested
• the page you came from (referrer), if your browser sends it
• browser and operating system (user agent)
• HTTP status code and amount of data transferred

Purpose: to deliver the website, find errors, and detect and fend off attacks. I don’t analyse the log data to identify individual visitors, and I don’t combine it with other data. I don’t use the log data for statistics. The visitor statistics come only from Umami (section 4).

Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is to deliver the website securely and without disruption.

Hosting: The website runs on a server rented from netcup GmbH, in netcup’s data centre in Nuremberg, Germany. The Caddy web server on that server writes the log files. The provider netcup processes the data on my behalf under a data processing agreement (Art. 28 GDPR).

Retention: Log data is deleted after 7 days. It is kept longer only while an attack or error is being investigated, and only until that is settled.

Do you have to provide this data? No. Without it, though, the server can’t deliver the page.

4Visitor statistics with Umami

I want to know which pages people read and where visitors come from. For that, this website counts visits with Umami. Umami is open-source software and runs on the same server as the website, at netcup in Nuremberg, Germany. The script and the address it sends data to are on spaceybot.de. No other provider receives this data.

What is recorded:

• the page you open and how long it stays open
• the page you came from (referrer) and campaign tags in the address, such as utm_source=topgg
• browser, operating system, device type, screen size and language
• approximate location: country, region and city, derived from the IP address
• clicks on buttons and links, such as “Add Spacey to Discord”, Patreon or the language switch
• which FAQ questions you open and how far you scroll down a page
• for the search on the commands page, only whether there were results, not what you typed
• whether you come back from Discord to “Getting started” after adding the bot. The server ID in the address is removed first.

No cookies and no recognition: Umami stores nothing on your device: no cookies and no data in your browser’s storage. To group the page views of one visit, Umami builds a hash. It uses the IP address, the browser identifier and a random value that changes every day. The IP address itself is not stored. Because the random value changes daily, a visit can’t be linked to visits on other days. I can’t identify anyone with it.

Do Not Track: If your browser sends the Do Not Track signal, Umami doesn’t record your visit.

Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is to measure the website’s reach and improve it. Umami stores no information on your device and doesn’t read stored information such as cookies from it. That’s why no consent under § 25 TDDDG (German Telecommunications Digital Services Data Protection Act) is needed.

Recipient: netcup as the host, which processes the data on my behalf (section 3). Nobody else.

Retention: The statistics contain no IP address and no identifier that lasts longer than a day. I only look at them as totals. They are deleted automatically after 24 months.

Objection: You can object to the measurement at any time. Turn on Do Not Track in your browser, or block scripts from spaceybot.de/_a/ with a content blocker. The website works the same without it.

5Cookies and content from other servers

This website stores nothing on your device: no cookies and no data in your browser’s storage. It doesn’t embed advertising or social media services, and no videos, maps, fonts or statistics services from other servers. Fonts, images and scripts come from the same server as the page. That’s why the website doesn’t ask for your consent.

6Links to other websites

The website links to Discord (bot invite, support server), top.gg and Patreon. These are plain links: as long as you don’t click, these providers learn nothing about your visit. When you click, their site opens, and your browser may tell them that you came from spaceybot.de. From there, their privacy policy applies. Adding Spacey to a server happens on Discord; Premium is purchased on Patreon.

7When you email me

If you write to support@spaceybot.de, I process your email address and your message in order to reply. If you give your name, I process that too.

• Legal basis: Art. 6(1)(f) GDPR; my legitimate interest is answering enquiries. If it concerns a contract, such as Premium, Art. 6(1)(b) GDPR applies.
• Recipients: The emails are stored by my email provider on my behalf.
• Retention: I delete the emails once your request is settled, unless the law requires me to keep them.

8Who receives data

Data from your visit to this website goes only to:

• the hosting provider netcup (sections 3 and 4) and my email provider (section 7), both as processors,
• authorities, if I’m legally required to share it.

I don’t sell data or pass it on for advertising. This website makes no automated decisions and builds no profiles within the meaning of Art. 22 GDPR.

9The Spacey Discord bot

This policy covers the website only. What the bot stores in Discord, why and for how long is in the privacy notes for the bot.

Visiting this website links nothing to your Discord account. The website has no login.

10Your rights

You have the right to

• access the data I process about you (Art. 15 GDPR),
• have incorrect data corrected (Art. 16 GDPR),
• have data erased (Art. 17 GDPR),
• restrict processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR).

To use these rights, email support@spaceybot.de.

Right to object (Art. 21 GDPR): I process some data on the basis of Art. 6(1)(f) GDPR. You can object to this at any time on grounds relating to your particular situation. I will then stop processing the data. Exceptions: I can show compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims. You can object to the visitor statistics without giving a reason (section 4).

Complaints (Art. 77 GDPR): You can lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

11Changes

If something that processes data is added to the website, I will update this policy first. The version on this page applies.