Privacy
In short: this site sets no cookies, uses no tracking and loads nothing from other servers. Only the usual server logs are kept by GitHub and Cloudflare. Emails and Nodvard’s Discord server have their own sections further down.
Responsible
Nico Benksc/o IP-Management #12727
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany
Email: kontakt@nodvard.com
Hosting on GitHub Pages
The site is hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. When you open the site, GitHub processes the data needed to deliver it. This includes your IP address, date and time, the requested address, your browser’s user agent and the page you came from. GitHub keeps this data in server logs to run the service securely. According to GitHub, the visitor’s IP address is logged and stored for security purposes when a GitHub Pages site is visited (GitHub Pages, data collection). GitHub does not state a fixed retention period for this.
The legal basis is my legitimate interest in a reachable and secure website (Art. 6(1)(f) GDPR). Data may be transferred to the USA. By its own account, GitHub is certified under the EU-U.S. Data Privacy Framework (GitHub’s privacy statement), so the European Commission’s adequacy decision applies to the transfer (Art. 45 GDPR). Read more in GitHub’s privacy statement.
Domain and email at Cloudflare
The domain nodvard.com is managed at Cloudflare, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Requests to this site pass through Cloudflare’s servers before they reach GitHub. Cloudflare processes the same technical data as GitHub, mainly your IP address, to deliver the site and protect it from attacks. Cloudflare sets no cookies here. Cloudflare’s privacy policy does not state a fixed retention period for this data.
Here too, the legal basis is my legitimate interest in a reachable and secure website (Art. 6(1)(f) GDPR). Data may be transferred to the USA. By its own account, Cloudflare is certified under the EU-U.S. Data Privacy Framework (Cloudflare’s privacy policy), so the European Commission’s adequacy decision applies to the transfer (Art. 45 GDPR). See Cloudflare’s privacy policy for details.
Email forwarding
Emails to addresses at @nodvard.com are received by Cloudflare’s Email Routing service and forwarded to a mailbox at Google (Gmail). Cloudflare processes sender, recipient and content of the email to deliver it According to Cloudflare, Email Routing does not store or access the forwarded emails (Cloudflare Email Routing). For users in the EEA, the controller for the mailbox is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google’s privacy policy). Data may be transferred to the USA here as well. By its own account, Google LLC is certified under the EU-U.S. Data Privacy Framework (Google’s data transfer frameworks).
The legal basis for forwarding is my legitimate interest in reliably receiving messages to @nodvard.com in one place (Art. 6(1)(f) GDPR). If your email is about a contract or a request for one, such as a license for a company, the legal basis is Art. 6(1)(b) GDPR.
No cookies, no tracking
This site sets no cookies and stores nothing in your browser. There are no statistics, no ads and no embedded content. Fonts and images come from the same server as the site, nothing is loaded from third parties. That is why there is no cookie banner.
To keep spam bots from reading the email address, Cloudflare encodes it on most pages when delivering them. In the imprint and in this privacy policy it is in plain text on purpose, because it must always be readable there. A small Cloudflare script, also loaded from nodvard.com, makes it readable again in your browser. It sets no cookies and collects no data. Without JavaScript, you see a notice instead of the address.
Links to other sites
The site links to Discord, GitHub and Cloudflare. You only leave nodvard.com when you click one of these links. The privacy rules of that provider apply there.
Nodvard’s Discord server
For questions and help there is a community server on Discord. Discord is a service of Discord Netherlands BV, Schiphol Boulevard 195, 1118 BG Schiphol, Netherlands, and of Discord Inc., USA, for users outside the EEA. What Discord does with your data is described in Discord’s privacy policy. Discord transfers data to the USA. By its own account, Discord and its U.S. entities comply with the EU-U.S. Data Privacy Framework.
A Nodvard bot runs on the server. I run it myself on my own server in Germany. When you open a ticket, you get a private ticket channel on Discord that only you and the Nodvard team can see. While the ticket is open, the bot only stores your Discord user ID, the channel ID, the ticket type and the time it was opened. When the ticket is closed or the channel is deleted, the bot deletes this entry.
The bot does not store the messages in the ticket, they stay in the ticket channel on Discord. When the ticket is closed, it reads the history once (up to 2,000 messages with username, profile picture address, text, links to attachments and time). For this it has Discord’s permission to read message content (“Message Content”). From this it creates an HTML file and sends it by direct message only to the person who opened the ticket. The file is not kept by the bot. 5 seconds after closing, the bot deletes the ticket channel on Discord.
Outside tickets, the bot automatically gives new members a role when they join and sends a welcome message. For this it has the “Server Members” permission. When someone opens a post in the help forum, the bot replies automatically based on the title and tags. It does not read or store any other messages.
The legal basis is my legitimate interest in running the community server and handling requests in tickets (Art. 6(1)(f) GDPR). You can object to this, most easily by email.
If you send me an email, I only use your details to reply. Afterwards I delete them, unless I am required to keep them.
Your rights
You have the right to access, correction, deletion and restriction of processing, to data portability and to object. You can also complain to a data protection authority. Write to kontakt@nodvard.com.
The Nodvard Deck program
This policy covers the website nodvard.com, the email addresses at nodvard.com and Nodvard’s Discord server. You run the Nodvard Deck program yourself, on your own machine.