Legal

Privacy Policy

Last updated: May 19, 2026

1. Data Controller

Timo Otten

Wiesenstraße 1

41363 Jüchen

Germany

Email: Timo@ShadeHost.eu

Security contact: timootten@icloud.com

2. General Information

We process personal data only to operate and provide the service.

3. Hosting, Infrastructure & Service Providers

The service is operated on servers of external hosting providers (e.g. Oracle Cloud Infrastructure, Zap-Hosting). These providers supply the technical infrastructure and may process personal data such as IP addresses, server logs and database contents in the course of technical service provision.

4. Data Collected

a) Account Data

  • Display name
  • Email address
  • Password (hashed only)
  • Registration timestamps
  • Verification status

b) Optional Social Login Data (provider-dependent)

  • Provider ID
  • Email address
  • Name / Profile picture (if provided)

c) User Content

  • Study plans
  • Learning goals
  • Progress data
  • Calendar entries

d) Technical Data / Server Logs

  • IP address
  • Device and browser info
  • Access timestamps
  • Session identifiers

e) Push Notifications (optional)

  • Push tokens / endpoints
  • Device keys
  • Delivery status

5. Cookies & Local Storage

We use only strictly necessary cookies and local storage required for:

  • Authentication
  • Security
  • Core functionality

No tracking, analytics or advertising cookies are used.

We use only strictly necessary cookies and local storage technologies.

Legal basis: Art. 6(1)(b) GDPR and § 25(2) No. 2 TDDDG

6. Purpose of Processing

  • Service operation
  • User account management
  • Storage of user data
  • Security and abuse prevention
  • Technical stability

7. Legal Bases

  • Art. 6(1)(b) GDPR (contract performance)
  • Art. 6(1)(f) GDPR (legitimate interest: security & operation)
  • Art. 6(1)(a) GDPR (consent, e.g. push notifications)

8. Retention

Data is stored as long as the account exists.

Data is deleted:

  • upon user request
  • or when legally required

Backups may be retained for a limited period due to technical constraints. A fixed deletion schedule for backups is not guaranteed.

9. Data Sharing

Data is only shared with:

  • Hosting and infrastructure providers
  • Backup providers
  • Legal authorities if required by law

No sale or marketing use of data.

10. User Rights

You have the right to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction (Art. 18 GDPR)
  • Portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)

Requests are processed as quickly as possible, at the latest within 30 days of receipt (Art. 12(3) GDPR).

Email: Timo@ShadeHost.eu

11. Right to Complain

State Commissioner for Data Protection NRW

Competent supervisory authority for North Rhine-Westphalia

https://www.ldi.nrw.de

12. Data Security

We apply technical and organisational security measures to protect data.

We implement appropriate measures in line with the state of the art. However, absolute security cannot be guaranteed for internet-based systems.

13. Minors

The service is not intended for users under 16 years.

If such data becomes known, it will be deleted.

14. Changes

This policy may be updated at any time.

Latest version is always available on the service website.

ImprintTermsBack