Privacy policy

The controller for data processing on this website is:

This website sets no cookies, runs no analytics and embeds nothing belonging to anyone else. Nobody is counted, profiled or followed from one page to the next. The only personal data that arises at all is what any web server records while it hands you a page, and that is set out below.

The application is a separate matter and an even quieter one: it works offline and keeps your collection on your own computer. The little it does over the internet is described under “The Collectionist application”.

Every time a page is requested, our host’s systems automatically record what your browser sends: the address requested, the date and time, the volume of data transferred, the page you came from, your browser and operating system, and your IP address.

This is processed under Art. 6 (1) (f) GDPR; our legitimate interest is the technically faultless delivery and the security of the site. The data is not merged with any other source, and it is deleted or shortened as soon as those purposes no longer need it. Where our host processes personal data on our behalf, a data processing agreement under Art. 28 GDPR is in place.

These pages are served by:

Cloudflare, Inc. 101 Townsend St, San Francisco, CA 94107, USA

These pages travel over TLS, which you can recognise by the “https://” in the address bar. While it is in use, what you send cannot be read along the way.

There are none. No cookies are set, no local storage is written, no analytics or statistics service is used, and there are no social media buttons, embedded videos, maps or advertising networks. Nothing on these pages contacts a third party while you read them.

The typefaces are delivered from our own server together with the page. No request is made to Google Fonts or any other font service, and your IP address reaches none of them.

If you send us an email, your message and the address it came from are stored so that we can answer it and follow the matter up. The legal basis is Art. 6 (1) (b) GDPR where your enquiry concerns a contract, and otherwise our legitimate interest in answering you, Art. 6 (1) (f) GDPR.

We delete such correspondence once it has been dealt with and no retention obligation stands in the way. Please bear in mind that an ordinary email travels unencrypted.

To issue a licence key we process the name and email address you give us, together with whatever billing details the payment requires. The legal basis is Art. 6 (1) (b) GDPR: without them there is no contract and no key.

Invoices and the records around them are kept for as long as commercial and tax law demand, currently up to ten years under § 147 AO and § 257 HGB. The key itself is checked on your own computer and never reported back to us.

The application keeps your collection in an ordinary folder on your own computer. There is no account, no cloud and no telemetry: nothing you type, photograph or attach is transmitted anywhere, and we never see any of it.

It reaches the internet in exactly one place. On starting, it asks GitHub, Inc. (88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA) whether a newer version has been published. That request carries your IP address and the usual browser information to GitHub, which may process it in the United States; the legal basis is our legitimate interest in getting fixes and security updates to you, Art. 6 (1) (f) GDPR. Nothing about your collection or your licence travels with it, and on a computer that is offline the check simply does not happen.

Under the GDPR you have rights over the data we hold about you, and they cost nothing to use.

You may exercise the following at any time, free of charge, by writing to the address above:

• Information about the data we hold about you (Art. 15 GDPR)
• Correction of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Portability, in a machine-readable format (Art. 20 GDPR)
• Objection to processing based on our legitimate interests (Art. 21 GDPR)
• Withdrawal of a consent you have given, with effect for the future

If you believe we are processing your data unlawfully, you may complain to a supervisory authority, in particular in the member state where you live, where you work, or where the suspected infringement took place. That right stands alongside any other remedy.

We keep this text in step with the site and with the law, so it changes whenever either of them does. The date above is the version you are reading.