Privacy Policy

1. Verantwortlicher

Fabian Kirchweger, 4625 Offenhausen, Austria. E-mail: techflipsi@kirchweger.de. This website is operated purely as a hobby under § 30 of the Austrian Income Tax Act. It is not a company within the meaning of the GDPR and has no data protection officer.

2. What data is collected

Visiting the website: When you visit pages, technically necessary data is processed (see server logs below). The fonts of this website (Space Grotesk, Inter) are loaded entirely from my own server, so no connection to Google or other third parties is established when you visit the website. The fonts are under open-source licenses (SIL Open Font License) and are served locally.

Kontaktformular: When you use the form, the data you enter (name, e-mail optional, message, selected section) is processed only to answer your message. It is not shared with anyone and deleted after 6 months at the latest.

Account for comments (login): When you register for the comment feature, we store your Anzeigenamen/Spitznamen, your E-Mail-Adresse (only to send the one-time activation link; the server only holds a technical hash of the address, never the address in plain text), your password only in encrypted form as a bcrypt hash (unumkehrbar), den Verifizierungsstatus of your account and the Anmeldezeitpunkt. These details serve the comment feature only: no newsletter, no sharing.

Kommentare: When you write a comment, your display name, the comment text and the timestamp are stored and published until deletion (on your request or when the post is removed). Your name is publicly visible on comments, so feel free to use a nickname.

Server-Protokolle: The web server logs technically necessary access (time, URL, status code, truncated IP address, the last 3 octets are anonymised). These logs serve security and error diagnosis and are deleted automatically after 7 days.

3. Rechtsgrundlagen

Contact form: Art. 6 (1) (a) GDPR (consent by submitting). Account & comments: Art. 6 (1) (a) GDPR (consent by voluntary registration) and (b) (providing the comment feature as a contractual service). Server logs: Art. 6 (1) (f) GDPR (legitimate interest in secure operation). Technically necessary cookies follow § 165 (3) of the Austrian Telecommunications Act 2021.

4. Speicherdauer

Server logs: 7 days. Contact form messages: up to 6 months, then deleted unless you wish further correspondence. Account data: until you delete your account (one e-mail is enough, then the account and its comments are removed). Comments: until the post is deleted or on your request.

5. Sharing with third parties & third-country transfers

Your data is not shared with third parties. There are no third-country transfers, your data does not leave the EU.

6. Cookies

This website sets no consent-requiring cookies, hence no cookie banner. There are only technisch notwendige Cookies:

wh_user (Kommentar-Login): A login token that keeps you signed in for 7 days. It is marked "HttpOnly" (not readable by JavaScript), is transmitted encrypted and contains no personal data itself, just a cryptographically signed anonymous token. Without it, logging in would not be technically possible.

Galerie-Sitzungs-Token: A short-lived token for gallery uploads that builds no personal profiles and expires after one hour at the latest.

Tab-Notiz (sessionStorage): During a visit, your browser temporarily remembers the scroll position so that reloading brings you back there. This note lives only in the tab, holds no personal data and is deleted when the tab closes. Nothing is stored permanently.

Statistics (Umami) stores nothing on your device and reads nothing from it, it sets no cookies and does not touch your device. It therefore requires no consent under § 165 (3) of the Austrian Telecommunications Act 2021.

7. Deine Rechte

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21) and withdrawal of consent (Art. 7 (3) GDPR); a withdrawal does not affect processing done before it. Just send me an e-mail. Delete account: A short e-mail is enough; your account and its comments will then be removed.

8. Beschwerderecht

You can contact the Austrian data protection authority directly on your own: Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Austria, dsb.gv.at, dsb@dsb.gv.at.

Stand: September 2026