Privacy Policy
1. Controller
2. Data collected
2.1 Server log files
Each time you access this website, information transmitted by your browser is automatically recorded. This includes:
- IP address (anonymized)
- Date and time of the request
- Requested page/file
- Browser type and version
- Operating system
- Referrer URL
This data is used to ensure operation and for error analysis. The legal basis is Art. 6(1)(f) GDPR (legitimate interest).
2.2 Usage statistics
We record anonymized click counters for the linked applications to understand how the website is used. No personal data is stored.
3. Cookies
This website does not use cookies or third-party tracking services.
4. Retention period
Server log files are managed by the hosting provider (exe.dev) and retained according to its policies. The anonymized click counters are stored indefinitely but contain no personal data.
5. Linked applications
This website links to further applications by the operator on various subdomains (*.exe.xyz). With the exception noted below, these applications do not store personal data and do not use cookies.
Exception: refugeestatus.eu – In this application users may voluntarily enter their own case data (timestamps, status, facility name, optionally notes, appointments and document photos). No real names are collected and no location coordinates are stored – the facility is determined on the device and only its name is transmitted, and GPS metadata is stripped from photos before upload. The data is nevertheless tied to a pseudonymous ID and is therefore personal data; all user-entered content is precautionarily treated there as special categories under Art. 9 GDPR and stored encrypted per case (AES-256-GCM); deletion works by destroying the case key. The legal basis is explicit per-action consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). Its own privacy policy applies.
Note: Siedler Österreich – The game needs no registration, cookies or tracking; it stores a freely chosen pseudonym, the game state and chat messages within a game session, accessible only via a random rejoin token. The application does not log IP addresses and the GPS feature works on the device only. The game is intended for players aged 14 and over; the chat is filtered automatically. Its own privacy policy applies.
Note: umfeld-at – The map and API application uses no cookies, accounts or
tracking and does not log IP addresses (only the request path with its parameters, e.g. queried
coordinates, briefly in the server journal; for rate limiting the IP address is counted
transiently in memory only). Display settings stay in the device's localStorage. Feedback sent
voluntarily via /api/v1/feedback is stored permanently and is publicly readable –
please do not enter personal data there. No parcel or owner data is processed. Its own
privacy policy
applies.
Some applications load open-source libraries and map tiles from the following third parties (refugeestatus.eu, Siedler Österreich, 5MP.globe, umfeld-at and INSPIRE Austria load no external resources at all):
- unpkg.com – Leaflet map library (no tracking cookies)
- cdnjs.cloudflare.com – Font Awesome icons, Three.js, jsPDF (no tracking cookies)
- cdn.jsdelivr.net – Chart.js, Three.js controls (no tracking cookies)
- basemaps.cartocdn.com / tile.openstreetmap.org – map tiles based on OpenStreetMap (no tracking cookies)
- fonts.bunny.net – Bunny Fonts (GDPR-compliant, EU-hosted fonts) in "Land Cruiser 100 Blueprint" only
When these CDN services are used, your IP address is transmitted to the respective providers. This is technically necessary to deliver the resources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a functioning website).
6. Your rights
You have the right to:
- Access your stored data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
To exercise these rights, please contact us at the email address given above.
7. Right to lodge a complaint
You have the right to lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
www.dsb.gv.at
8. Hosting
This website is hosted at exe.dev (Bold Software, Inc., USA). The servers are located in the USA. Data transfer to the USA takes place on the basis of Art. 49(1)(a) GDPR (consent through use) and Art. 49(1)(b) GDPR (performance of the usage contract). For more information see the exe.dev Privacy Notice.
9. Open source
The source code of this website is published on GitHub under the MIT licence; licences and data sources of all applications are listed in the imprint.
Last updated: October 2026