Privacy policy

In brief

• We set no cookies for visitors, neither for statistics nor for advertising.
• We use no tracking services, ad networks or embedded third-party content.
• We never store IP addresses in plain text, only as a hash with a secret that changes daily and is deleted after two days.
• We count visits coarsely (platform, country, device type) and delete the individual records after 90 days.
• The site is delivered through Cloudflare, acting as our processor.

Controller

The controller responsible for data processing is:

[missing: set it in config.php under legal.*]
[missing: set it in config.php under legal.*]
Email: [missing: set it in config.php under legal.*]

Hosting and server logs

The website runs on a server in a data centre of our hosting provider. Web server access logs containing IP addresses are switched off. In exceptional cases technical error logs may contain an IP address; they are deleted automatically after at most 14 days.

Cloudflare (processor)

We use the content delivery network and attack protection of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. All requests to this website pass through Cloudflare's servers. On our behalf, Cloudflare processes technical connection data such as the IP address, the requested document and the browser type in order to deliver the site quickly and securely.

We have a data processing agreement with Cloudflare (Data Processing Addendum). Data may be transferred to the USA. Cloudflare is certified under the EU-US Data Privacy Framework and the Swiss-US Data Privacy Framework; the European Commission's standard contractual clauses apply in addition.

When Cloudflare's bot protection checks a suspicious request, Cloudflare may set a strictly necessary security cookie (e.g. «__cf_bm» or «cf_clearance»). It serves only to fend off automated attacks, not statistics.

When you create a post

We store the generated satire text, the options you chose (language, spectrum, level, ingredients), the optional nickname and avatar, and the time. This is how we provide the post under its permalink. To prevent abuse we also store a pseudonymous identifier derived from the daily-changing IP hash.

The nickname is optional. If you opt in to the leaderboard, it appears there publicly together with your index.

Posts are kept as long as they are published. If you want one deleted, write to us with the code from its link.

Visit and sharing statistics

When a post link is opened, we store on the server and without a cookie: the time, the likely platform of origin (from the link parameter or the referring domain), the country (determined by Cloudflare), device type, browser and operating-system family, and the hashed IP value. We do not store the full user agent or the IP address.

When platforms fetch the link to show a preview (e.g. Facebook, WhatsApp, Telegram), we count this separately as «preview loaded». When you click a share button, we store the platform and the time.

The IP hashes are formed with a secret that changes daily and is deleted after two days. After that the data can no longer be linked to anyone. We delete individual visit records after 90 days; only aggregated daily figures remain.

If your browser sends «Global Privacy Control» or «Do Not Track», we do not count your visit.

Figure vote

For the figure vote we store per vote only the figure, yes or no, the date and the daily changing, irreversible visitor hash (see statistics), so that each person votes once per day. There is no account and no cookie. Submitted figures contain only a freely chosen name and the parts; they are linked to the Golden Tinfoil Hat post, not to a person.

Storage in your browser

Some convenience features store data only locally in your browser (localStorage): your progress in the generator, unlocked badges, the Mastodon instance for the share button, and the links to your own posts with their private statistics. This data is never sent to us. You can delete it at any time in your browser settings.

Share buttons and external links

The share buttons are plain links. No scripts from social networks are loaded. Only when you click a button does the platform open, and its privacy policy applies. The same is true for links to external websites.

Legal bases

We process personal data according to the principles of the FADP (lawfulness, good faith, proportionality, purpose limitation). Where the GDPR applies, we rely on Art. 6(1)(b) GDPR (providing the service you use) and Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation and anonymised reach figures).

Retention periods

• Daily secret for IP hashes: 2 days
• Counters for overload protection (rate limit): 1 day
• Individual visit records: 90 days
• Aggregated daily statistics and share clicks: not personal, kept indefinitely
• Posts: as long as published, deletion on request
• Server error logs: at most 14 days

Your rights

You have the right to access your data, to rectification, erasure and restriction of processing, to object to processing, and to receive or transfer your data. Write to [missing: set it in config.php under legal.*]. Because we store no names and no plain-text IPs, we can often only identify data by the code of a post.

You can lodge a complaint with a supervisory authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch), in the EU with the data protection authority of your country of residence.

Editorial area

There is a protected administration area for the editorial team only. After login it uses a strictly necessary session cookie. Visitors of the public website never receive this cookie.

Changes

We adapt this privacy policy when the website or the legal situation changes. The version published here applies.