Privacy policy

This is a translation for your convenience. The German version is legally binding.

This policy applies to the website meinappwerk.online. Our apps each have their own privacy policy, which is linked in the app and in the store listing.

1. Controller

Thorsten Janßen (MeinAppwerk)
Kappelwindeckstr. 48, 77815 Bühl, Germany
Email: kontakt@meinappwerk.online

2. Principle

This website is an information site with a contact form. When you visit the public pages, no cookies are set, no third-party tracking or analytics tools are used (only our own anonymous statistics, see section 4) and no content is loaded from third-party servers (no external fonts, maps or videos). All files are delivered directly by our web server. The only exception: when you open the contact form, the spam protection Cloudflare Turnstile is loaded (see section 6).

A technically necessary session cookie is set only for the password-protected administration area, which is used exclusively by the operator.

3. Server log files

When you access the website, our hosting provider automatically processes technical data transmitted by your browser: IP address, date and time of access, page requested, amount of data transferred, referrer URL as well as browser and operating system. This data is required to deliver the website securely and reliably.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure operation of the website). Log files are deleted after 14 days at the latest unless they are needed longer to investigate a security incident.

4. Anonymous visitor statistics

To understand which content is of interest, we count page views with our own privacy-friendly statistics directly on our server – without cookies, without storing anything on your device and without third-party services. For each page view we store: time, page requested, the domain of the referring website (e.g. “google.de”, without the full address) or a campaign code from the link, device type (desktop/tablet/phone), browser and operating system family and the preferred browser language. We also count clicks on the logos and app links as well as the number of contact requests sent (without their content).

Your IP address is not stored for this purpose. To count several page views on the same day as one visit, we create a shortened, irreversible hash from the IP address, the browser identifier and a random value that is regenerated every day. The random value is replaced daily and the old one discarded; after that the hash can no longer be attributed to anyone – not even by us. Automated requests (bots, link previews) are not counted. Statistics data is deleted after 400 days at the latest.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in anonymous reach measurement to improve our offering). Since nothing is stored on or read from your device, no consent under § 25 TDDDG is required.

5. Hosting

The website is operated by a hosting provider with whom a data processing agreement pursuant to Art. 28 GDPR has been concluded.

6. Contact form and contact by email

If you write to us via the contact form or by email, we process your details (name, email address, selected topic, content of the message) in order to answer your request. The form data is forwarded as an email to our mailbox and is not stored in a database.

To protect against abuse and spam, we store an irreversible hash of your IP address together with the time for a maximum of one hour when the form is submitted. This allows us to limit the number of messages per connection. The entry is then deleted automatically.

Cloudflare Turnstile: We additionally protect the contact form with Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile is only loaded when you open the contact form – merely visiting the page does not establish any connection to Cloudflare. When loading and performing the check, Cloudflare processes technical data of your device and browser (including IP address, browser and system information, characteristics of the interaction with the check) in order to distinguish between humans and automated programs. When the form is submitted, our server verifies the result directly with Cloudflare; we do not transmit your IP address or the form content. Cloudflare is certified under the EU-US Data Privacy Framework; the transfer to the USA is based on this adequacy decision. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in protecting the form against spam and abuse). More information: Cloudflare privacy policy.

The legal basis is Art. 6 (1) (b) GDPR insofar as an app or a contract is concerned, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering requests and in protection against abuse). We delete messages as soon as the request has been dealt with and no statutory retention obligations apply.

7. Links to other websites

We link to the websites of our projects and partners (for example via the logos at the bottom of the page) and to Google Play. The logos are stored on our own server; no data is transmitted to these providers when they are displayed. Only when you click such a link does the external page open in a new tab, and its privacy policy applies.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Simply contact us by email.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

9. Changes

We will update this policy if the website or the legal situation changes. Last updated: October 2026.