Privacy Policy

1. Controller (Verantwortlicher)

The controller responsible for processing personal data under the GDPR / DSGVO is:

Nikita Aul

An der Teichbreite 11

38448 Wolfsburg, Germany

E-Mail: support@aull.dev

2. Scope

This policy covers the website aull.dev. Each Android application published under the developer name Aull.DEV on Google Play has its own privacy policy, linked from its respective Play Store listing.

3. Data processed on this website

3.1 Server logs (Cloudflare)

This site is served via Cloudflare. When you access the site, Cloudflare automatically collects technical data including IP address, browser type, operating system, referring URL, and timestamp. This data is processed for security purposes (DDoS protection, abuse prevention) under Art. 6(1)(f) GDPR (legitimate interest) and is automatically deleted after a short retention period defined by Cloudflare.

See Cloudflare's privacy policy: cloudflare.com/privacypolicy

3.2 Cookies

This website does not set its own cookies. Cloudflare may set technical cookies necessary for security (e.g. __cf_bm) under Art. 6(1)(f) GDPR.

3.3 Email correspondence

If you contact us via support@aull.dev, your email address, name, and the content of your message are processed solely for the purpose of responding to your inquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / contract performance) or Art. 6(1)(f) GDPR (legitimate interest in responding). Emails are stored for up to 3 years for documentation purposes and then deleted.

Email is routed through Cloudflare Email Routing and Google (Gmail). Both providers process headers and content as part of mail delivery.

3.4 Analytics (GoatCounter)

This website uses GoatCounter, a privacy-friendly, open-source web analytics service. GoatCounter does not use cookies and does not store IP addresses in plaintext. Instead, it generates a daily salted hash of (IP + User-Agent) to estimate unique visits, and that salt is rotated daily. No personal profiles are built.

Data collected: page URL, referrer, screen size, country (derived from IP and discarded), browser language. Data is stored at GoatCounter (operated by Martin Tournoij, EU). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding aggregate site usage). No cookie consent banner is required, because no cookies and no persistent identifiers are used.

GoatCounter privacy policy: goatcounter.com/help/privacy

You can opt out of analytics by enabling "Do Not Track" in your browser - GoatCounter respects this signal.

3.5 No ads, no third-party tracking

This website does not use advertising networks, third-party tracking technologies, or social media trackers.

4. Recipients of data

Personal data are not shared with third parties except:

• Cloudflare, Inc. (USA / EU) - hosting, CDN, email routing - under data processing agreement and EU Standard Contractual Clauses.
• Google Ireland Limited - Gmail for inbound email forwarding - under EU Standard Contractual Clauses.
• GoatCounter (Martin Tournoij, EU) - privacy-friendly analytics, no cookies, no personal data stored long-term.
• Tax advisors / authorities where required by law.

5. Your rights (Art. 15-22 GDPR)

You have the right to:

• Access (Art. 15) - request information about data we process.
• Rectification (Art. 16) - correct inaccurate data.
• Erasure (Art. 17) - request deletion of data.
• Restriction of processing (Art. 18).
• Data portability (Art. 20).
• Object (Art. 21) to processing based on legitimate interest.
• Withdraw consent at any time (Art. 7(3)).

To exercise these rights, contact: support@aull.dev

6. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. For Lower Saxony (our jurisdiction):

Die Landesbeauftragte für den Datenschutz Niedersachsen

Prinzenstraße 5, 30159 Hannover

lfd.niedersachsen.de

7. Changes to this policy

This privacy policy may be updated to reflect changes in our practices or legal requirements. The current version is always available at https://aull.dev/privacy.