Privacy Policy

(As of: May 21, 2025 · Version 2)

This Privacy Policy complies with the requirements of the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Telecommunications Act 2021 (TKG 2021) and applies to the following services:


1. Controller

Franz Josef Drexler
Address: see Imprint
E-Mail: [email protected]
Phone: +43 681 208 87 501


2. Automated server log files

PurposeData categoriesLegal basisStorage duration
Operation, delivery, IT security- Date / time - public IP - HTTP headers (browser/app version, OS, provider, device) - location (country, city from Geo-IP)Art. 6 (1) lit. f GDPR (legitimate interest: functionality & defense against attacks)30 days

3. Data you provide

PurposeTypical dataLegal basisStorage duration
User account, bookmarks, notesE-mail address, notes you enter, device nameArt. 6 (1) lit. b GDPRuntil account deletion + 30 days
Sending login codesE-mail addressArt. 6 (1) lit. b GDPR30 days
Support communicationContent of your message, sender addressArt. 6 (1) lit. a GDPRuntil completion + 6 months

We do not send newsletters, advertising or push notifications.


4. Statistics & license reporting

4.1 Plausible Analytics

We use Plausible Analytics (EU hosting at Hetzner). Plausible is cookie-free, does not store persistent identifiers and keeps only aggregated reports (page/chapter views, daily unique visitors, top countries).
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in reach measurement and product improvement).

4.2 Monthly Active Users (MAU) per translation

Some Bible publishers require aggregated usage statistics to fulfill contracts.

Opt-out

You can object via email to [email protected]; your IP / hash will be blocked and no longer counted.


5. Processors (Art 28 GDPR)

ServiceLocation & hostingPurposeSafeguards for third-country transfers
SupabaseFrankfurt (eu-central-1) · possible US backupsDatabase & AuthData Processing Agreement incl. EU SCC
Plausible CloudGermany (Hetzner)Cookie-free analyticsData Processing Agreement (no third-country transfer)
Cloudflare Pages / WorkersGlobal CDN · USA HQCDN, DDoS protection, proxy for PlausibleData Processing Agreement · EU-US DPF certification
ResendUSATransactional emailsData Processing Agreement + EU SCC
Google CloudUSASemantic searchData Processing Agreement · EU-US DPF certification
Apple iCloud MailEU servers, possible US backupReceiving support emailsData Processing Agreement + EU SCC

DPF = EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR)
SCC = EU Standard Contractual Clauses (Art. 46 GDPR)


6. Data security


7. Data subject rights

You have the right to access, rectification, erasure, restriction, data portability and to object to processing under Art. 6 (1) lit. f GDPR.
Contact us as per § 1.

You may lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at) or any other EU supervisory authority (Art. 77 GDPR).


8. Changes

This notice is updated as needed. The change date above shows the current version. Please check this page regularly.