Privacy Policy

Last updated: 2026-09-04

This privacy policy covers the jackpoll.org marketing website ("the Website") only. It does not cover survey and response data processed inside the Jackpoll application itself — that is covered by the app's separate privacy policy at app.jackpoll.org/privacy.

Controller

Quavon UG (haftungsbeschränkt)
Langbehnstraße 39, 83022 Rosenheim, Deutschland
Email: contact@quavon.de

Hosting & server logs

When you visit the Website, our hosting provider automatically collects technical data (e.g. IP address, date/time, requested page, referrer, browser type) in server log files. This data is used solely to operate the Website securely and reliably (Art. 6 (1)(f) GDPR) and is deleted automatically after a short period.

Storage on your device (cookies & local storage)

The only thing we store on your device is what is required to operate the Website, which is permitted without consent under § 25 (2) TDDDG: a “lang” cookie holding your chosen language. We use no third-party advertising or social-media cookies. The analytics software described in the next section stores nothing on your device either, which is why we show no consent banner.

Analytics (Rybbit)

We use Rybbit, an open-source analytics tool we run ourselves at tracker.quavon.de on our own infrastructure in Germany. Rybbit sets no cookies and stores nothing on your device — nothing is written to or read from local storage or session storage.

The following is sent to tracker.quavon.de: the page you are on, the page you came from (referrer), coarse browser, operating system, device type and screen resolution details, your browser language, and the country derived from your IP address. Nothing is passed on to third parties.

Because this involves no access to your terminal equipment within the meaning of § 25 (1) TDDDG, no consent is required. The legal basis is Art. 6 (1)(f) GDPR; the legitimate interest lies in the statistical evaluation of usage in order to improve what we offer.

Under Art. 21 GDPR you have the right to object at any time, on grounds relating to your particular situation, to this processing. You will find our contact details in the imprint.

Supporters & payments

If you voluntarily become a supporter, we process your email address, display name, chosen tier and billing interval, amount, and optionally a profile picture, banner image, description and link (Art. 6 (1)(b) GDPR, contract). Images you upload are stored on the Jackpoll app's server infrastructure (MinIO/S3, see its privacy policy). The payment itself is processed by our payment provider Mollie B.V. (Netherlands); we only store the payment, customer and subscription reference IDs and payment status returned by Mollie, never card details. A Data Processing Agreement (Art. 28 GDPR) is in place with Mollie.

Invoice data

We issue an invoice for every payment. For that we additionally process your legal first and last name, your billing address and — if you order as a business — the company name and a voluntarily supplied VAT identification number. This data is kept separate from your public display name and never appears on the supporters page. The legal basis is Art. 6 (1)(b) GDPR (contract) and, from the moment the invoice is issued, Art. 6 (1)(c) GDPR together with our tax and commercial law obligations.

Management link

So that you can edit your supporter profile and cancel without an account, we generate a random token and email it to you as a link. Anyone holding that link can see your profile, which is why you can have it replaced at any time. To cancel we additionally email a single-use, short-lived numeric code to your address. The legal basis is Art. 6 (1)(b) GDPR.

How long we keep things

Server log files are deleted after 30 days at the latest. Your public supporter profile stays while you support; after a cancellation the listing ends and we keep the profile data so that supporting again picks up where you left off — we delete it immediately on request. Invoices and the invoice data behind them are subject to a statutory retention obligation: ten years under § 147 (3) AO and § 14b (1) UStG. During that period they are blocked for any other purpose and deleted once it expires.

Contact

If you contact us by email, we process the details you provide solely to handle your request (Art. 6 (1)(b) or (f) GDPR). Contact: contact@quavon.de.

External links

The Website links to external services such as GitHub and the Jackpoll app (app.jackpoll.org). Data processing on those external sites is governed by their own privacy policies.

Data protection officer

No data protection officer has been appointed. Fewer than twenty persons here are permanently engaged in the automated processing of personal data (§ 38 (1) BDSG), and none of the conditions of Art. 37 (1) GDPR is met. We answer data protection enquiries directly.

Your rights

You have the right to access, rectify, erase, restrict processing of, port, and object to the processing of your data (Art. 15–21 GDPR). To exercise these rights, contact contact@quavon.de.

You also have the right to lodge a complaint with a data protection supervisory authority; the competent authority for us is Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.