Privacy policy
1. Controller
Günter Weber
Mommenheimer Straße 48
55129 Mainz
Email: info@webersheim.de
2. What happens to what you type
Nothing is stored. The sentences you enter are sent to the server, computed there, and returned in the response. They are not written to any database, any file or any log. They exist only in memory for the duration of the request.
There is no account, no session and no identifier that could connect two requests. Processing rests on Art. 6 (1) (b) GDPR: it is what you asked for by using the tool, and it is over when the answer arrives.
3. Server log files
The web server records access data. The IP address is truncated before it is written, so that individual identification is no longer possible by general judgement. Entries are kept for 14 days and then deleted.
Legal basis is Art. 6 (1) (f) GDPR — the legitimate interest in operating and securing the service.
4. Cookies and browser storage
This site sets no cookies and puts nothing into localStorage or sessionStorage. Your progress
in the assistant is not stored either: reloading starts over.
That is why there is no consent banner. Consent under § 25 TTDSG is only required for non-essential storage access — and none takes place.
The exception is the practice room at /ueben/ (18+). Whoever starts a practice conversation there gets one strictly
necessary session cookie (ks_session, for that path only,
HttpOnly, 24 hours at most) so the replies belong to the right
conversation. It holds a random identifier, no account and nothing
about you. The conversation itself is processed by a language model on
our own servers in Germany and deleted after the debrief, after 24
hours at the latest. None of it goes to third parties. This cookie
needs no consent under § 25 (2) TTDSG, because the practice room does
not work without it.
5. The draft link
At the end of the assistant you can have your draft turned into an address. That happens only when you click it — the address bar does not change while you fill things in.
Your sentences then sit in the fragment of that address, after the hash. Browsers do not transmit fragments to the server; they stay on your device. The server learns nothing about the content of such a link, and nothing is stored then either — the draft is recomputed from the input every time.
What you should know: the link contains your sentences. Whoever receives it can read them. It also lands in your browser history. It is meant for keeping your own draft, not for passing on.
6. No third parties, one counter of our own
No content is loaded from outside servers: no fonts, no maps, no embedded videos, no CDN, no advertising network. The site sends a Content-Security-Policy that technically blocks connections to outside servers.
The one exception is an anonymous page counter (Umami)
that we run ourselves on our own server
(stats.webersheim.de). It counts page views, referring
page, browser and device type, and the country. It sets no cookies and
stores no personal data: the IP address is not stored; it is only used
at the moment of the visit to compute an anonymous session identifier
whose key changes every month. If your browser sends "Do Not Track",
nothing is counted at all. Legal basis is Art. 6 (1) (f) GDPR — the
interest in knowing whether the site is found.
7. Hosting
The site is hosted at Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Deutschland. The host processes data on our behalf under a data processing agreement in accordance with Art. 28 GDPR.
8. Encryption
This site uses TLS. You can recognise it by the padlock in your browser
and by https:// in the address bar.
9. Your rights
You have the right to information, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Since no personal data is stored beyond the truncated log entries, there is in practice little to disclose or erase — but the right exists all the same. You also have the right to lodge a complaint with a supervisory authority.