Privacy policy

Datenschutzerklärung under the EU General Data Protection Regulation (GDPR). Last updated 5 October 2026.

Short version

This website uses no cookies, no analytics and no tracking. Its only outside connection is to my own small server at Neon (Frankfurt), which shows the download count and receives feedback you choose to send. The web server keeps a standard access log for 14 days. The RefRef app does not send your images or any usage data anywhere.

Who is responsible

Server log files

Each time you load a page, the web server automatically records:

• your IP address
• date and time of the request
• the page or file requested, the HTTP status code and the amount of data sent
• the referring page, if your browser sends it
• your browser and operating system (user agent)

This is needed to deliver the website and to detect and fix errors and attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in running a secure website). The logs are deleted automatically after 14 days. They are not combined with other data or used to identify visitors.

Hosting

The website runs on a server rented from Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The server is located in Germany. Hostinger processes data on my behalf under a data processing agreement (Art. 28 GDPR).

Live demo

The demo on the home page runs entirely in your browser. Images you drop or paste into it are not uploaded and are not stored. They are gone when you close or reload the page.

Feedback and download counter

The download count and the feedback form are served by a small function I run on Neon, operated by Neon, Inc. (a Databricks company), USA. The function and its database are located in Frankfurt, Germany. To deliver these requests, Neon processes your IP address; I do not store it.

If you send feedback, I store your message, the time it was sent and, only if you enter it, your email address. I use them to improve RefRef and, if you left an email address, to reply. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the app), and Art. 6(1)(a) GDPR (consent) for the optional email address. Neon processes this data on my behalf under a data processing agreement (Art. 28 GDPR); transfers to the USA rely on the standard contractual clauses in that agreement. I delete feedback when it is no longer needed, at the latest after 2 years, or earlier if you ask.

Downloads and external links

The download buttons and the GitHub link lead to GitHub, operated by GitHub, Inc., USA. The support buttons lead to Ko-fi, operated by Ko-fi Labs Limited, UK. Clicking one of these links takes you to their website, and their own privacy policies apply. No data is sent to them unless you click.

The RefRef app

The desktop app has no account, telemetry or update check. Boards are saved only where you choose on your computer. The app connects to the internet only when you drag an image from a website into it, to download that image.

Email

If you email me, I use your address and message only to reply. Legal basis: Art. 6(1)(f) GDPR. I delete the conversation when it is no longer needed.

Your rights

You have the right to access, correct and delete your data, to restrict or object to its processing, and to data portability (Art. 15–21 GDPR). To use these rights, email hello@severinschleps.com.

You can also complain to the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.