Our database only stores the ID of the message (which is the part of the URL before '#'), when the message was stored (so that we can delete it after about 30 days), and the encrypted message itself. We do not store any other information. As such the data in the database is anonymous data according to the GDPR, because no one (even we) can link it back to a person.
Our webserver stores the usual access and error log entries. They contain:
We do not store other information like e.g. browser name and version, operating system, referring website etc.
Access and error logs are deleted after 30 days. Only anonymous aggregate information (such as how many requests in total were sent in a given month) are kept.
IP addresses are personal identifiable information according to the GDPR. As such you can contact us about any web logs we have stored about your IP address, given you can prove to us that you were using that address at that time. As we delete log files after 30 days, we cannot provide information that is older than 30 days.
We do not use cookies.
We do not use any third parties (e.g. tracker scripts, advertisements etc.)
We do not share any information with third parties (except maybe for anonymous aggregate information like total number of requests in a given month.)
The site is run on a dedicated (bare-metal) server rented from a German hosting provider.