Privacy policy

Spektal GmbH, Stau 123, 26122 Oldenburg, Germany. Contact for data protection matters: hallo@spektal.com. Full details in the imprint.

Your account. Name, email address and a hash of your password (never the password itself), plus the organizations you belong to and your role in them. Without this there is no sign-in. Legal basis: Art. 6(1)(b) GDPR - performance of a contract.

Your session. A session record and the cookies listed below, so that you stay signed in between page loads. Same legal basis.

Connection data. Our servers write access and system logs, which contain the IP address of the connection, the time, and the page requested. We need them to operate the service and to notice attacks. Legal basis: Art. 6(1)(f) GDPR - legitimate interest in a working, secure service.

What we do NOT do. No analytics, no tracking pixels, no advertising, no profiling, and no automated decision-making. Nothing about your use of this console is passed to third parties for their own purposes.

Only two, and both are strictly necessary for the function you asked for - which is why there is no consent banner. Nothing is set before you act.

• rytiv-console.session_tokenKeeps you signed in. Set only after you sign in, removed when you sign out.
• rytiv.viewRemembers whether 'Home' takes you to the list or the canvas. Set only after you switch.

Your account data is stored in a managed PostgreSQL database in Amsterdam, Netherlands. It never leaves the EU.

• Scaleway SAS8 rue de la Ville l'Eveque, 75008 Paris, FranceBare-metal servers, managed PostgreSQL, object storage and the load balancer that carries this console. Data is stored in the Amsterdam region (Netherlands).
• Cloudflare, Inc.(outside the EU)101 Townsend St, San Francisco, CA 94107, USAAuthoritative DNS for rytiv.dev only. Cloudflare resolves the name; it is not in the request path and sees no content of your session.

Each acts as a processor under Art. 28 GDPR. For Cloudflare, the transfer to the USA is covered by the EU standard contractual clauses; it concerns the resolution of a domain name, not the content of your session.

Account data for as long as your account exists. Delete the account and it goes with it. Sessions expire on their own and are removed. System logs are kept short-term for operations and security.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). Write to hallo@spektal.com and we will answer. You may also lodge a complaint with a supervisory authority (Art. 77); the one responsible for us is the data protection authority of Lower Saxony.

We update this policy when the service changes. The date at the bottom of the page says when it last did.