Privacy
Last updated: September 2026Controller
Ivan Trusov, Berlin, Deutschland. hello@ballwerk.link or the contact form.
Data
- Email address, password hash
- Holds your account. Art. 6(1)(b). The password itself is never stored and cannot be recovered.
- Session records: IP address, browser user agent
- Lets a compromised account be signed out everywhere. Art. 6(1)(f).
- Contact form: name, email address, message
- Reaches our inbox so we can answer. Never written to the database. Art. 6(1)(f).
No analytics, advertising, or tracking cookies. The session cookie that keeps you signed in is the only one set.
Recipients
Your account is stored in Frankfurt, Germany, and our server code runs there. These parties process data on our behalf:
- VercelHosting and delivery of this website - Functions execute in Frankfurt (fra1); company is US-based
- NeonDatabase storing your account - AWS Europe (Frankfurt), eu-central-1
- ResendSending confirmation and password-reset email - Mail dispatched from Ireland (eu-west-1); delivery logs stored in the US under the EU-US Data Privacy Framework
- CloudflareDNS for ballwerk.link - Global; US-based company
Retention
Accounts stay until you ask us to delete them. Unconfirmed accounts are removed after 30 days. Session records expire on their own. Contact mail is deleted once the conversation ends.
Your rights
Access, rectification, erasure, restriction, portability, objection: Art. 15 to 21. Mail hello@ballwerk.link and we act within one month. You may also lodge a complaint with a supervisory authority, Art. 77.