1. Data controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

Gino Elflein
Schießhausstraße 7c
97228 Rottendorf
Germany
Email: elflein-gino@web.de

2. Overview of processing activities

This website processes personal data to the following extent:

• Technically necessary server log data when the page is accessed (see section 5)

There is no registration, no login, and no advertising. This site uses Umami for anonymized, cookie-free traffic analytics (see section 4). All fonts, layout, and interaction libraries are served directly from this site's own server (see section 6) — no data is transmitted to external content delivery networks. The anime and character data shown on this site (names, images, birth dates of fictional characters) is provided through a separate, server-side sync with AniList; at no point is any personal data of this site's visitors transmitted to AniList — visitor searches run exclusively against this app's own, locally stored database.

3. Cookies

This website uses no cookies — neither technically necessary ones nor any for analytics or marketing purposes. No information is stored in visitors' browsers (e.g. via local storage or session storage). Since no cookies or comparable technologies within the meaning of Sec. 25 TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, the German law governing cookies and similar technologies, formerly TTDSG) are used, no cookie-consent banner is required. This also applies to the traffic analytics described in section 4, which likewise operates without cookies.

4. Traffic analytics with Umami

This website uses the analytics service Umami (Umami Cloud, operated by Umami Software, Inc.) for anonymized traffic analytics, e.g. number of page views, browser/operating system used, approximate geographic origin (country/city level), and referring pages. According to its own documentation, Umami deliberately avoids cookies and fingerprinting techniques and does not build persistent user profiles linkable across multiple visits.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in statistically evaluating and understanding the reach of this website in order to improve it). When data is transmitted to Umami Cloud, the visitor's IP address is technically processed briefly, even though Umami states it is not permanently stored or linked to an individual — this still constitutes processing of personal data within the meaning of the GDPR. More information: Umami's privacy policy.

5. Hosting and server log files

This website is hosted by: [Name and address of the hosting provider, e.g. Hetzner Online GmbH, or "self-hosted on own infrastructure"].

Every time this website is accessed, the web server automatically records so-called server log files, which the browser automatically transmits. This typically includes:

• IP address of the accessing device
• Date and time of access
• Page/file accessed and amount of data transferred
• Browser and operating system used (user agent)
• Referring URL (referrer), if transmitted by the browser

This processing takes place to ensure a smooth connection, system security, and for administrative purposes, based on Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website). Log files are retained for [retention period, e.g. 7 days] and depend on the hosting provider's configuration.

6. Self-hosted resources (no external CDN requests)

Fonts (Google Fonts), the Bootstrap layout framework, and the htmx JavaScript library are not loaded from external content delivery networks (e.g. Google, jsDelivr, or unpkg). Instead, they are served as files directly from this website's own server. When this website is accessed, no connection to servers of these (or any other) third-party providers is ever established, and no IP address is transmitted to such third parties. All requests stay exclusively between the visitor's browser and the hosting provider named in section 5.

7. Recipients and transfers to third countries

Since all resources on this website are self-hosted (see section 6) and the traffic analytics described in section 4 involves no transfer to third countries, operating this website does not itself involve any transfer of personal data to third parties or to countries outside the EU/EEA. The server log data mentioned in section 5 is not disclosed to third parties, except where required by law or necessary for legal action in the event of unlawful attacks on the server infrastructure. If the hosting provider named in section 5 operates servers outside the EU/EEA, its own privacy policy applies in addition.

8. Your rights as a data subject

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

You can contact me at any time using the contact details given in section 1. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), e.g. the authority responsible for your place of residence.

9. Currency and changes to this privacy policy

This privacy policy may be updated as the scope or purpose of data processing changes (e.g. when introducing new features such as user accounts, analytics tools, or further external services). The version current at the time of your visit applies.

Last updated: 30.07.2026