Privacy

wasbringich.de is built to need as little data as possible. There are no accounts, no tracking and no cookies.

Who is responsible

Guido Grogger, email guido.grogger@gmail.com (see the imprint for the full address).

What we store

• Event data: title, date, optional time, place and an optional description — entered by the organiser.
• Entries: a first name, the dish, optional allergen labels and an optional recipe link — entered by each guest.
• Suggestion log: which recipe suggestions were shown for an event and whether one of them was adopted. This record contains no IP address, no user agent and no link to a person.
• Channel code: if the event was created through a link containing ?via=…, we store that short code (for example “vegan-berlin”) with the event. It tells us which channel brings people here — nothing else. No cookie, no recognition across visits, no link to a person, and it is deleted together with the event.
• Feedback: whatever you write or say in the feedback form, the page you sent it from, and your email address if you choose to give one. Details under “Feedback” below.

Please only enter a first name, and nothing about other people that they would not want on a shared page.

Why

To run the potluck list you asked for (Art. 6 (1) (b) and (f) GDPR — performing the service you requested and our legitimate interest in operating it).

How long

Every event is deleted automatically 30 days after its date — including all entries and log records. A daily job does this; there is no archive and no backup copy that outlives it. The single exception is feedback: it does not belong to an event and has its own period of 180 days (see below).

Feedback

The “Feedback” link in the footer lets you write to us from any page — typed or spoken. What we then store:

• your text and, if you recorded one, your voice message;
• the page you opened the form from: its path, the page pattern, and the event and entry id if the page belonged to a potluck. That is the whole point — without it, “the button was hard to find” cannot be placed. The rest of the address bar is not stored: neither the secret links (edit tokens) nor the draft values from the sign-up form;
• the time, the language and the app version;
• your email address, if you give one.

Legal basis. Text and page context: our legitimate interest in improving the service (Art. 6 (1) (f) GDPR). Voice message and email address are explicitly optional — sending them is your consent to processing them (Art. 6 (1) (a) GDPR). The form works just as well without either.

Voice message. Recording only starts once you press the record button and your browser has additionally asked you for microphone permission. You can listen to the recording and discard it before sending. It stays on our server in the EU, is listened to by us rather than transcribed automatically, goes to no speech service, and is never used to recognise you by your voice.

Email address. Used for exactly one thing: replying to this piece of feedback. No advertising, no newsletter, never passed on, no recognition across visits.

Withdrawal and deletion. You can withdraw your consent at any time with effect for the future and ask us to delete your feedback — an informal email to guido.grogger@gmail.com is enough. Processing that happened before the withdrawal stays lawful.

Period. Feedback is deleted automatically 180 days after it arrives, together with the voice message and the email address.

Cookies and tracking

None. No cookies at all, no local storage, no analytics, no external fonts, no CDN. The protection against cross-site form submissions uses a signed token inside the form itself, not a cookie.

Server logs

The web server logs technical request data (including IP address) for a short time to keep the service secure and working. These logs are not merged with event data.

External links

Recipe links point to third-party sites (for example eat-this.org, veganheaven.de, biancazapatka.com, zuckerjagdwurst.com). If you follow such a link, the site you land on receives your request; its own privacy policy applies. In the English interface the "Google Translate" link sends the recipe address to Google Translate — only if you click it. We send no referrer with these links.

Your rights

You may ask for access, correction, deletion, restriction, objection and data portability, and complain to a supervisory authority. In practice: everyone can delete their own entry with their personal edit link, and the organiser can delete the whole event at any time with the edit link. If you have lost the link, write to guido.grogger@gmail.com.

Hosting

The app runs on a server in the EU. Data is not passed to third parties.