This English version is provided for convenience. In case of doubt, the German version is authoritative.
This app stores only what it needs to run. There is no advertising, no analytics and no tracking. Your entries are never sold and never used for advertising.
Controller
The controller responsible for data processing is Nils Klaßen. For privacy questions or to exercise your rights, contact me at info@halfbaked-industries.de.
What data is processed
Account
Your email address, display name and your password, which is only ever stored as a cryptographic hash. If you sign in with Google, your name and email address come from your Google account. The legal basis is Art. 6(1)(b) GDPR, performance of the user agreement.
Your entries
The timeframe you choose, your rules, your daily answers including free text entries, the resulting daily percentages, and your group membership and group name. The legal basis is Art. 6(1)(b) GDPR.
Bug reports
If you report a problem from the settings page, your message is stored together with your user ID so the issue can be traced and fixed. The legal basis is Art. 6(1)(f) GDPR, the legitimate interest in a working application.
Server logs
When you open the site, the hosting provider processes technically necessary access data such as IP address, timestamp and the address requested. The legal basis is Art. 6(1)(f) GDPR, the legitimate interest in secure and stable operation.
What other people can see
If you are in a group, the other members see your display name and your daily progress as a percentage. Your individual answers, your rules and your free text entries stay private and cannot be viewed by anyone else. Nobody can join a group without an invite code.
Cookies
Only technically necessary cookies are set: one remembers your language choice, the others keep you signed in. There are no analytics or advertising cookies, which is why the site does not ask for cookie consent.
Service providers
The following providers act as processors for running this service:
- Supabase — database and authentication. The database runs in the Central EU (Frankfurt) region, so your content is stored within the European Union.
- Vercel — website delivery. The company is based in the USA and delivery runs through European servers. Processing of technical access data in the USA cannot be fully ruled out.
- Google — only if you choose to sign in with Google. In that case Google's privacy terms apply in addition.
How long data is kept
Your data is kept for as long as your account exists. If you want your account deleted, a plain email to info@halfbaked-industries.de is enough. Your account and all associated entries will then be deleted.
Your rights
You have the right to access your data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). A plain email is enough.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for your place of residence.