Privacy policy

When you request a page, a file or the demo, the web server logs your IP address, the URL, the timestamp, the response status, the referring page and your browser user agent. The reverse proxy in front of the web server logs the same kind of data. We process this data to deliver the page and to block abuse. Our legal basis is legitimate interest (Art. 6(1)(f) GDPR).

Logs rotate: when a log reaches its size limit, the oldest entries are deleted. We build no profiles from them.

The site sets no cookies. If you pick a light or dark theme, your browser stores that choice in its local storage. It stays in your browser and is not sent to us. The demo at demo.colliepwa.dev stores its theme and your progress through its tour the same way.

We count visits with a self-hosted instance of Matomo at matomo.sprqvntrs.com. It runs on our own server at Hetzner in Germany, and its script is loaded from there. We turn cookies off, so Matomo writes nothing to your browser.

For each page you open, your browser tells Matomo the page address, the page title, the page you came from, how long the page stays open, and your clicks on links that lead to another site or to a file download. Matomo also sees your IP address and technical details of your browser and device, such as the browser, the operating system, the screen size and the language. Matomo anonymizes your IP address before it stores a visit, so no stored record holds your full address. All of it stays on our server. We never sell it or share it with ad networks. We analyse site traffic under our legitimate interest (Art. 6(1)(f) GDPR).

This site serves the Collie install scripts, install.sh and install.ps1. A command such as curl does not run the visit counter's script, so the web server counts these downloads itself. For each request it reports two facts to Matomo: which file was fetched, and what kind of client fetched it (curl, wget, PowerShell, a browser, or other). It reports no IP address and no user agent. Our legal basis is legitimate interest (Art. 6(1)(f) GDPR). The web server log described above still records the request itself.

You can sign up for news about Collie in the page footer. You receive it only if you sign up. We never add anyone ourselves. Our legal basis is your consent (Art. 6(1)(a) GDPR).

We use double opt-in. After you submit your address, we send one confirmation email. We add you to the mailing list only after you click the link in that email. The link works once and stops working after seven days. If you do not click it, we send you nothing more.

For the newsletter we store:

• Your email address.
• The language of the page where you signed up, so we write to you in that language.
• The time you signed up and the time you confirmed.
• The IP address and the browser user agent of your signup request. We keep them as proof of your consent (Art. 6(1)(f) GDPR, our interest in proving that consent was given).
• Whether you are subscribed or unsubscribed.

The signup form uses Cloudflare Turnstile to tell people from bots. When the widget loads, your browser connects to Cloudflare. Cloudflare receives your IP address and technical details of your browser, and answers with a token. Our server sends that token to Cloudflare to check it. We use Turnstile under our legitimate interest in keeping bots out (Art. 6(1)(f) GDPR).

We store the signup data in a database on a netcup server in Vienna, Austria. We send each email through Pigeon, our own mail service. Pigeon keeps your address on the newsletter list and records each mail it sends and what happened to it: delivered, bounced, or marked as spam. It runs on our server at Hetzner in Germany. Pigeon hands the mail to Amazon Web Services, which sends it through Amazon SES in Frankfurt, Germany.

You can unsubscribe at any time. Every newsletter has an unsubscribe link, and your mail app may show its own unsubscribe button. One action removes you from our list and from the list at our mail service. Unsubscribing does not affect the lawfulness of processing before your withdrawal. After you unsubscribe, we keep your address, marked as unsubscribed, so that no mail goes to it again. To have it erased too, email info@sprqvntrs.com. We erase it on request.

Cloudflare runs the name servers for colliepwa.dev. When your device looks up our address, Cloudflare's name servers answer. Cloudflare does not proxy the traffic of this site: your browser connects to our server directly.

• Hosting: netcup GmbH, Karlsruhe, Germany, runs the web server and the newsletter database on a server in Vienna, Austria. Hetzner Online GmbH, Gunzenhausen, Germany, runs the Matomo server and the mail service Pigeon in its data center in Nuremberg, Germany.
• Email delivery: Amazon Web Services EMEA SARL, using its email service in Frankfurt, Germany. It receives your email address and the text of the emails.
• DNS and bot check: Cloudflare, Inc., USA. It answers name server lookups for colliepwa.dev and runs Turnstile on the signup form. Cloudflare takes part in the EU-US Data Privacy Framework.
• Replies: Google Ireland Limited, Dublin, Ireland (Google Workspace). When you reply to a newsletter or write to news@colliepwa.dev, your mail lands in our Google Workspace mailbox.

We do not sell your data. We share data with third parties only when the law requires it.

Server logs rotate by size, as described above. Matomo keeps its visit records until we delete them. We have set no automatic deletion today. We keep the newsletter data until you ask us to erase it. A signup that is never confirmed is deleted after 30 days.

You can access, correct, delete, restrict, object to, and export your personal data. You can withdraw a consent at any time. To use these rights, email info@sprqvntrs.com. For the newsletter, write from the address you signed up with, so that we can find your entry.

You have the right to lodge a complaint with a supervisory authority. Our authority is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).