Privacy Policy
This is a static website. There is no account, no login, no contact form, no newsletter and no checkout — nothing where you enter data yourself. Page requests involve technical access data and anonymous audience measurement. If you write to me, the section “Contact by e-mail” also applies.
Controller
Sascha Henning
Dresdner Landstr. 11
01744 Dippoldiswalde
Germany
E-mail: sascha@saschahenning.de
Hosting and server logs
The site is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). When a page is requested, Cloudflare processes the technically necessary access data: IP address, date and time, requested address, referring page, browser and operating system identifier. This data serves delivery, security and attack mitigation.
The legal basis is Art. 6(1)(f) GDPR — my legitimate interest in operating the site securely and without disruption. Processing takes place under Cloudflare’s data processing agreement. Cloudflare also processes data in the USA, based on the EU Standard Contractual Clauses and Cloudflare’s certification under the EU-U.S. Data Privacy Framework.
Cloudflare runs its own security mechanisms for attack detection that execute when a page loads.
Audience measurement with Umami
To see which content is being read, I use Umami — self-hosted analytics
software. There is no external analytics provider: the data runs on my own
instance at insights.saschahenning.de, on a server in Germany, reached — like
this website — through Cloudflare. The data is evaluated by me alone and is
neither sold nor combined with other data sources.
Umami sets no cookies and stores nothing on your device. Your IP address is not stored; it only feeds into a non-reversible hash whose key rotates daily. That allows page views within a single day to be grouped into a session, but not traced back to a person, and not across days or across other websites.
Collected are: the page requested, the referring page, the page language, browser, operating system, device type, screen size and country of origin. In addition, these clicks are counted:
- downloading a file (a PDF, for example)
- clicking a link to another website
- switching the language
- clicking a link inside this site
- switching between light and dark appearance
- clicking an e-mail link, for example in the imprint or to ask about testing Omnido
- copying a bank transfer detail on the “Support PioTime” page
- how far a page was read, in steps of 25, 50, 75 and 100 percent
For downloads, links and navigation, the area of the page where the click happened is recorded (header, top section, content or footer); for links into my apps also the fixed label I wrote into the link, such as “omnido-pricing”. For copying, only the field that was copied is recorded (recipient, IBAN, BIC or reference), never the copied text.
For e-mail links, only the contact method “mailto” is recorded, not the e-mail address, subject or message body. A click does not show whether you sent a message.
Only what was clicked is recorded — never who clicked it.
The legal basis is Art. 6(1)(f) GDPR, my legitimate interest in knowing whether and how the site is used. No cookies are set and no identifiers are placed on your device, so I do not ask for consent under § 25 TDDDG.
You can object to the measurement at any time — informally, by e-mail to the address above. Common script or tracking blockers in your browser are also effective.
Storage on your device
This site stores one item locally in your browser: the appearance you
picked (light or dark), under the key theme in localStorage. It never leaves
your device and only serves to keep your choice on your next visit.
Only if you open a page with ?umami=off added to the address, a second item
is stored: the key umami.disabled. While it is set, Umami does not count your
visits in this browser. ?umami=on removes it again.
The legal basis for both items is § 25(2) no. 2 TDDDG — the storage is necessary for the function you explicitly asked for. You can delete the entries at any time in your browser settings.
The PioTime App
Under piotime.saschahenning.de I offer PioTime, an app for tracking
field-ministry hours. It runs in the browser and can be installed to the
home screen; for iPhone and iPad it is also available in the App Store.
This policy applies to both as well — with the following specifics.
Your entries stay on your device. Everything you record in PioTime — hours, notes, credits, Bible studies, goals and backup files — the app stores locally on your device, in the browser or in the App Store app. There is no account; the app sends your entries to no one, not even to me. The only exception is the voluntary device syncing (below): if you pair devices, an end-to-end encrypted copy sits on the sync server, which I cannot read. That also means: I cannot recover lost data. The backup file you can create in Settings stays in your hands alone.
The app is delivered via Cloudflare; the section “Hosting and server logs”
applies. Usage is counted with the same self-hosted Umami instance as on
this website; the section “Audience measurement with Umami” applies. In
addition, interactions are counted: which tab was opened (Home, Month,
Overview, Settings) and that an entry was saved, a report was opened or the
app was installed, as well as whether the hint to install the app was shown,
tapped or dismissed. Also counted: the way an entry was saved (plan, quick
button, new entry or edit), whether saving failed or the dialog for a new
entry was closed without saving, whether a report was copied or shared, and
which settings page was opened. Nothing more: no duration, no category, no kind of activity, no note, no goal
value, no error text. Of the parameters of the address that was opened, only the campaign labels utm_source, utm_medium, utm_campaign and utm_content are sent; other parameters and the part after “#” are removed first. Each page view also carries a platform tag with one of four fixed
values: “ios-app” (App Store app), “android-app” (Android app), “pwa”
(installed as a web app, on the home screen or on a computer) or “browser” (browser tab) — it comes from
the app itself, never from anything you enter.
Error reports
When a technical error occurs in the app, it sends an error report to
GlitchTip — like Umami, self-hosted software on my own instance
(glitchtip.saschahenning.de), with no external service provider. A report
contains the error message, the technical sequence leading up to it (such
as the app’s network requests), the app version, and browser and operating
system identifiers. It does not contain your entries, notes or inputs, and
your IP address is not stored in it.
Error reports cannot be turned off in the app. The reason is simple: PioTime is free, and these reports are my only way to find and fix bugs. The legal basis is Art. 6(1)(f) GDPR — my legitimate interest in a working app. Error reports are automatically deleted after 90 days.
Feedback
Using the “Feedback” item in the app’s settings, you can send me a message.
When you do, the app hands the app
version, your set language, colour scheme, the displayed background colour,
and whether it is running
installed or in the browser, to my feedback form
(feedback.saschahenning.de), so I can technically place your report. Your
name is not included — unless you write it into the message yourself. After
you submit, the form sets a cookie fb_thanks_<reference> that only carries
the reference of your report and expires after one day; it shows you the
thank-you page with that reference. The legal basis for this is Section 25(2)
No. 2 TDDDG. Otherwise, the section “Contact by e-mail” applies to your
report accordingly.
Device syncing
You can use PioTime on multiple devices and pair them with a QR code. This is voluntary: without pairing, the app never connects to the sync server, and you can dissolve an existing pairing at any time in Settings.
Pairing generates a key on your device that exists only in the QR code and never reaches my server, plus an access code your devices use to identify themselves to the server on every sync. Your data is encrypted on the device and only then transmitted. As a result, the server holds only an encrypted data package that only your paired devices can read — plus a random identifier with no link to your person, a checksum of the access code (so that only paired devices can fetch or change the package), the package’s size, and the time of the last upload. The server does not store the access code itself. There is still no account; the server does not know names, e-mail addresses or content.
If no device uploads changes for three months, the server deletes the package on its own. If you dissolve the pairing, the package is deleted immediately; in its place, an empty record of the dissolution with the identifier and checksum, without content, remains for up to three months. If the server still holds the package at that moment, it also permanently keeps a minimal record of the dissolution: the group’s random identifier and a checksum of the access code — no content, no key, no name. It prevents a device that has been away for a long time and is still paired from accidentally recreating the dissolved pairing after the three-month period, and is therefore kept indefinitely. The server copy is a convenience, not a backup: it can disappear at any time — your devices always keep the complete dataset, and your backup file remains the protection against data loss. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by pairing and can withdraw at any time by dissolving the pairing.
Support
The “Support” item in the app’s settings opens a page on this website. It lists two ways to support PioTime voluntarily: bank transfer and PayPal. The app itself processes no payment and never learns whether you support it.
Bank transfer. If you transfer money to my account, my bank statement shows what every transfer carries: your name as account holder, your IBAN, the amount, the date and the reference. The GiroCode on the page is read only by your banking app. It contains nothing but my account details and the reference; scanning it sends nothing to me.
PayPal. The PayPal link leads to PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). There is no connection to PayPal until you open the link. You need a PayPal account to pay; what PayPal processes as a controller in its own right is governed by PayPal’s privacy statement. From PayPal I receive the payment details, including your name, the e-mail address of your PayPal account, the amount, the date and your message if you write one.
I use these details to match the payment and for my own bookkeeping. The legal basis is the payment itself — contract fulfilment under Art. 6(1)(b) GDPR — which you decide to make.
The game Wortex
At wortex.saschahenning.de I offer Wortex, a daily word puzzle. It runs in
the browser and can be installed as a web app. The app runs on my own server
in Germany and is reached through Cloudflare; the section “Hosting and server
logs” applies to Cloudflare. My server sees your IP address. It keeps it only
briefly in memory to fend off too many requests in a short time and does not
store it (Art. 6(1)(f) GDPR, my legitimate interest in secure operation).
Profile. In training you play as a guest; your rounds then stay on your device. For the daily word, duels, friends, the friends league and statistics you create a profile: a name you choose and an emoji. Wortex does not ask for an e-mail address, a password or your real name. With the profile the server stores your language settings, your rounds (puzzle word, guesses, time taken, points), season points and streak, your friendships and duels. Your friends and duel opponents see your name and emoji, also in the leaderboards. If you share a result, anyone with the link sees name, emoji and the round. The legal basis is Art. 6(1)(b) GDPR: without this data the daily word, duels and league cannot work. The data stays stored until you ask for deletion.
Signing in. Instead of a password you get a profile link. The server keeps
only a hash of it. Once you open it, Wortex sets a session cookie
(wortex_session) that keeps you signed in for up to 30 days. It is required
for signing in (Section 25(2) No. 2 TDDDG). When you sign out, the server
deletes the session.
Storage on your device. In localStorage Wortex keeps your settings (language, difficulty, time limit, strict mode, theme), the solution words you played last, a training round in progress and two markers: what you last saw under friends and whether you answered the notification question. Rounds played offline wait in IndexedDB until they are synced with the server. So that the app works offline, it stores app files and word lists in the browser cache. The legal basis is Section 25(2) No. 2 TDDDG.
Notifications. If you turn notifications on, the server stores your browser’s push address, its keys and the browser identifier. Messages are delivered through the push service of your browser’s maker (for example Google, Mozilla or Apple). These services may also process the message in the USA; I have no influence on that. A message contains only “Wortex”, a short text and a link into the app. The legal basis is your consent (Art. 6(1)(a) GDPR). You withdraw it by turning notifications off in the app; the server then deletes the push address. If you only turn them off in the browser, it deletes the address at the next delivery attempt.
Audience measurement and error reports. Wortex counts visits with the same Umami instance as this website; the section “Audience measurement with Umami” applies. Links containing access codes are masked. Also counted: round start and round end with language, mode, difficulty, time limit, strict mode and number of guesses, and whether you copied or skipped your profile link. Puzzle words, guesses and names are not included. Technical errors go to the same GlitchTip instance as PioTime; the section on error reports applies. Access data, solutions, guesses and names are removed before sending.
Deletion. You cannot delete your profile in the app yourself at the moment. E-mail me with your Wortex name; I will then delete your profile with all rounds, duels, friendships and push addresses.
Contact by e-mail
If you write to me, I process your details to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR. My mailbox is operated by Microsoft (Microsoft Ireland Operations Limited, One Microsoft Place, Dublin 18, Ireland). Your message is kept until its purpose no longer applies and no retention obligations remain.
This also applies when you express interest in testing Omnido. The e-mail button opens your own e-mail app; the website does not create an account or an automatic waitlist entry. I use your message to answer your enquiry and discuss a possible test with you. Details of your device and apps are optional. Please do not send original messages, customer documents or other confidential content. Processing within the Omnido app is not part of this contact enquiry; you will receive the relevant information before a test.
Messages to kontakt@omnido.saschahenning.de are received by Cloudflare (provider as above) and forwarded to my mailbox. The forwarding log shows me the sender, recipient, time and the result of the delivery checks. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is a dedicated Omnido contact address whose destination I can change. The safeguards named above apply to the transfer to the USA.
Links to other websites
This site links to external offerings, among them JASP, Widget Builder, CongPlan, LinkedIn and my own apps. As soon as you follow a link, that provider’s privacy policy applies. I have no influence on their processing.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21 GDPR). Please use the e-mail address above.
You may also lodge a complaint with a supervisory authority. The one responsible for me is:
Die Sächsische Datenschutzbeauftragte
Devrientstraße 5
01067 Dresden
Germany