Privacy

MakeStatic keeps what it needs to copy a website and serve the copy, and nothing to follow you with: there is no analytics, no advertising and no tracking cookie.

Max Nowack, Schillerstr. 1, 37120 Bovenden, Germany, [email protected]. The same details are in the imprint.

The website is delivered through Cloudflare, which passes every request on to our server and so sees your IP address, your browser and the page you asked for.

To limit how often something can be started from one place — a trial copy, a log-in mail, a password attempt — we keep your IP address only as a salted hash, for at most one hour. Our fonts come from our own server; our pages load nothing from anyone else.

The legal basis is our legitimate interest in a service that works and cannot be abused (Art. 6(1)(f) GDPR).

We set one cookie, and only because the website needs it: it keeps a session and, when you sign in, keeps you signed in — for up to 14 days if you ask us to remember you. It needs no consent (§ 25(2) TDDDG).

When you put in an address, we keep that address, a copy of the one page it shows, a picture of that page and of the copy, and how long each took to appear. All of it is deleted after four hours.

The legal basis is the demonstration you asked for (Art. 6(1)(b) GDPR).

An account consists of your email address, your password — stored only as a hash — and the log-in tokens that keep you signed in. With it we keep the websites you add: their addresses, their copies, what we found on them and the log of every publish. All of it stays for as long as the account exists; to have it deleted, write to [email protected].

The mails we send — confirming your address, a log-in link, a notice about your site or your domain — go out through Brevo. The legal basis is the contract your account is (Art. 6(1)(b) GDPR).

When a visitor sends a contact form on a copy, MakeStatic receives the message on behalf of the site's owner, mails it to them through Brevo and keeps it for 90 days, or until the owner deletes it sooner. For those messages the site's owner is responsible and we process them on their behalf (Art. 28 GDPR); their own privacy notice applies.

A copy holds what the original website shows, and nothing else. It is served on its MakeStatic address, which search engines are told not to index, or on its owner's own domain, whose certificate Cloudflare issues. What a copy loads from elsewhere — a font, a video, an analytics script — is loaded from there, exactly as the original loads it, and is the site owner's to answer for.

• Hetzner Online GmbH, Germany: the servers MakeStatic runs on.
• Cloudflare, Inc., USA: delivering this website and the copies, and the certificates for customers' domains. Transfers to the USA rest on the standard contractual clauses in Cloudflare's data processing agreement.
• Brevo SAS, France: sending our mails.

If you write to us, we use your email address and message only to answer you, based on Art. 6(1)(f) GDPR, and delete them once they are no longer needed.

Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to its processing and to data portability. You also have the right to lodge a complaint with a supervisory authority, for example the one responsible for us: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover.

If MakeStatic starts handling data in a way this page does not describe, this page is updated before that change goes live.