Controller
Harry Neufeld
Wegscheid 25
53347 Alfter
Germany
Email: office [at] harry-neufeld.de
More details are in the legal notice.
Visiting this website
When you open a page, the web server stores technically necessary data in a log file: IP address, date and time, requested address, HTTP status code, amount of data transferred, referrer and browser identifier (user agent).
This keeps the site secure and stable, for example by detecting errors and attacks. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Log files are deleted automatically after 7 days and are not combined with other data.
- No cookies and no local storage in your browser.
- No tracking, no analytics tools, no advertising.
- No external content: fonts, scripts and images are served only from this server.
Hosting
The website runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes the data listed above on our behalf under a data processing agreement according to Art. 28 GDPR.
The Bubble app
Bubble needs no account, no email address and no phone number. Your identity is a key pair generated on your device.
Posts, photos, hearts, comments, profile and backups are end-to-end encrypted on your device before they are sent to the relay server. The relay only stores encrypted data under random-looking mailbox IDs. It cannot read content and does not know who is in which Bubble.
- What the relay sees: mailbox IDs, the number and size of messages, the expiry time of 24h posts and, during a request, your IP address. IP addresses are not logged or stored there.
- Retention: the relay permanently deletes 24h posts once they expire, together with their hearts and comments. The encrypted backup remains until you delete it.
- Photos: the app removes EXIF and GPS data before a photo is encrypted.
- Legal basis: providing the features you use under Art. 6(1)(b) GDPR.
If you run your own relay, its operator is responsible for the data on that server.
Contact by email
If you write to us, we use your email address and message only to answer your request (Art. 6(1)(b) or (f) GDPR). We delete them once they are no longer needed for that and no statutory retention obligations apply.
Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Just send us an email.
You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
Because content is end-to-end encrypted and there are no accounts, we cannot link it to a person. That protects you, but it also means we can only give information about content if you tell us the mailbox concerned.
Last updated
October 2026. We update this policy when the website or the app changes.