Privacy Policy

Controller

Email: web@finneggers.de
Phone: 0151 15867144

Website Access

When visiting the website, technically necessary connection data is processed, in particular IP address, date and time of access, requested URL, user agent, and other data required for delivery, stability, and security of the service.

The legal basis is Article 6(1)(f) GDPR.

Accounts and Profiles

When registering and using an account, we process username, display name, email address, password hash, and optional profile data such as bio, GitHub link, and organization.

The legal basis is Article 6(1)(b) GDPR.

Login, Sessions, and Password Reset

For login, a session token is processed and stored in a cookie. In addition, session data such as user agent, creation time, and expiry time are processed. For password reset, the provided email address and a time-limited reset token are processed.

The legal basis is Article 6(1)(b) GDPR and Article 6(1)(f) GDPR.

Publicly Visible Profile Data

Depending on the platform area, publicly visible data may include display name, username, bio, organization, GitHub link, and assigned engines and activity on the platform. Email addresses are not displayed publicly.

The legal basis is Article 6(1)(b) GDPR and Article 6(1)(f) GDPR.

Cookies

This website currently does not use analytics, tracking, or marketing cookies.

• openeelo_session: technically necessary login cookie, stored for up to 30 days or until logout.
• openeelo_theme: stores the theme you actively selected, for up to 12 months.
• openeelo_lang: stores the language you actively selected, for up to 12 months.

Preference cookies are only set if you actively choose the respective setting. If analytics or marketing technology is added later, separate consent will be required before use.

Storage Period

• We generally store account data for the duration of the user relationship.
• Session data expires after 30 days at the latest.
• Password reset tokens expire after 3 hours at the latest.
• Theme and language cookies expire after 12 months at the latest.

Recipients

Personal data is not shared with third parties for advertising purposes. If hosting or infrastructure providers are used for technical operation, processing only takes place to the extent necessary.

Your Rights

You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection in accordance with the GDPR. You also have the right to lodge a complaint with a data protection supervisory authority.