Privacy policy

We respect your privacy. This document explains what data we collect, why we need it, and how we protect it.

1. Who we are

The Service, the websites and apps of Appfabriek on this platform, is provided by Appfabriek, a trade name of B.V. Geert (Chamber of Commerce 99122235), Vijverlaan 33, 7553 CC Hengelo, NL. We are responsible for processing your data. Contact: support@appfabriek.com.

2. Data we collect

• Account data: your email address, an internal user ID and whether you want updates by email.
• Sign-in data: temporary login codes and, if you sign in with one, an ID from Google, Apple, Microsoft or Spotify.
• Visit statistics, without cookies and not linked to your account: pages visited, the referring site, browser and device type, time, a shortened IP address (last part set to zero) and the place it belongs to.
• Security: the IP address and browser of your signed-in sessions, and requests we block when they look like abuse.

3. Why we use this data

• To sign you in and secure your session.
• To provide the features of the Service, such as short links, and to show statistics.
• To send you updates if you choose to. You can switch them off with one click at any time.
• To detect abuse and improve the Service.
• To meet legal and accounting obligations.

4. Legal basis

We process data based on contract performance, legitimate interest, and where applicable your consent.

5. Retention

Login codes expire after 10 minutes. We keep visit statistics for 180 days, security logs for 30 days and backups for 15 days. We keep your account until you ask us to delete it.

6. Where your data is

Your data is stored on our own servers at Hetzner in Germany, within the EU. We also make a daily backup there.

7. Sharing with third parties

We do not sell personal data. Only services needed to provide the Service process data on our behalf: Hetzner (Germany) for our servers and backups, Google to send login codes and updates by email, and the sign-in service you choose yourself (Google, Apple, Microsoft or Spotify). Google, Apple and Microsoft are US companies; what goes to them is covered by the EU-US Data Privacy Framework. We determine the place for visit statistics on our own server, using the DB-IP database. No IP addresses leave the server for this.

8. Cookies

We only use functional cookies:

• a session cookie to keep you signed in and secure;
• while signing in with Google, Apple or Microsoft, a security cookie that expires after 10 minutes;
• if you choose a language yourself, a cookie that remembers that choice for a year.

Visit statistics work without cookies. There are no tracking or advertising cookies.

9. Your rights

You have the right to access, correct, delete, restrict and port your data, and to object. Email us at support@appfabriek.com. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. Security

We take appropriate technical and organizational measures to protect your data.

11. Changes

We may update this policy. The latest version is always available on this page.