Privacy policy

The controller, in short

1. Data protection at a glance

General information

The following gives a plain overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

Who is responsible for collecting data?

Data processing on this website is carried out by the website operator. Their contact details are in the summary above and in the controller section below.

How do we collect your data?

Some data you give us yourself, for example when you send an enquiry by email. Other data is recorded automatically by the web server when you visit the site, mainly technical data such as browser, operating system and the time of the request.

What do we use your data for?

The automatically recorded data serves only to deliver the website reliably and to keep it secure. Your behaviour is not analysed.

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have a right to have that data corrected or erased. If you have given consent to processing, you can withdraw it at any time with future effect. You further have the right, in certain circumstances, to request that processing of your personal data be restricted, and a right to lodge a complaint with the competent supervisory authority.

2. Hosting

IONOS

We host this website with the following provider: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit the site, IONOS records various log files including your IP address.

For details, see the IONOS privacy policy at ionos.de/terms-gtc/terms-privacy.

IONOS is used on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in presenting our website as reliably as possible.

Data processing agreement

We have concluded a data processing agreement for the service named above. This contract, required by data protection law, ensures that IONOS processes the personal data of our visitors only on our instructions and in compliance with the GDPR.

3. General notes and mandatory information

Data protection

We take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with statutory data protection rules and this privacy policy.

Please note that data transmission over the internet, for example when communicating by email, can have security gaps. Complete protection of data against access by third parties is not possible.

The controller

The controller responsible for data processing on this website is:

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

Retention period

Unless a more specific retention period is stated in this policy, your personal data remains with us until the purpose for processing it no longer applies. If you make a legitimate request for erasure or withdraw consent, your data is deleted unless other legally permissible grounds apply, such as retention periods under tax or commercial law.

Legal bases for processing

Where you have given consent: Art. 6 (1) (a) GDPR. For performance of a contract: Art. 6 (1) (b) GDPR. For legal obligations: Art. 6 (1) (c) GDPR. For legitimate interests: Art. 6 (1) (f) GDPR.

Withdrawing your consent

Many processing operations are possible only with your express consent. You can withdraw consent you have already given at any time. The lawfulness of processing carried out before withdrawal is unaffected.

Right to object (Art. 21 GDPR)

Where processing is based on Art. 6 (1) (e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. The applicable legal basis is set out in this policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing.

Right to lodge a complaint

In the event of infringements of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or the place of the alleged infringement.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine readable format.

Access, erasure and rectification

Within the applicable statutory provisions you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of processing, and where applicable a right to have it corrected or erased.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data where:

• you contest the accuracy of your data, for the period of verification,
• the processing was unlawful and you request restriction instead of erasure,
• we no longer need the data but you need it to assert legal claims,
• you have objected under Art. 21 (1) GDPR.

4. Data collected on this website

Server log files

The hosting provider automatically collects and stores information in server log files, which your browser transmits automatically. This comprises browser type and version, operating system, referrer URL, host name of the accessing computer, time of the request and the IP address.

This data is not combined with other sources. It is collected on the basis of Art. 6 (1) (f) GDPR for the purpose of technically sound and secure operation.

Cookies and browser storage

This website sets no cookies.

When you press the switch for the light or dark design, your browser stores that choice in its local storage (localStorage), so the site appears in the chosen design on your next visit. When you switch language, your browser remembers in its session storage (sessionStorage), for that page change, where on the page you were. Both stay on your device and are not transmitted to us.

This storage is strictly necessary for a function you explicitly asked for and requires no consent under § 25 (2) no. 2 TDDDG. You can delete it at any time in your browser settings.

No cookies or comparable techniques are used for advertising, tracking or analytics. If that ever changes it will happen only with your prior consent, which you can withdraw at any time, and this policy will be updated beforehand.

Contact by email

If you contact us by email, the details you provide, including your contact details, are stored so that we can deal with your enquiry and any follow up questions.

Processing is based on Art. 6 (1) (b) GDPR where your enquiry relates to the performance of a contract, and otherwise on our legitimate interest in answering it under Art. 6 (1) (f) GDPR. The data is deleted once the enquiry has been dealt with and no statutory retention periods prevent it.

The browser extension

The Prefill extension works inside your own browser. Post text, images, hashtags, saved lines and saved posts stay locally on your device. We receive neither your post content nor credentials or session data for the platforms you publish on.

Your activity on X, Bluesky, Threads, Mastodon and W Social is governed solely by the privacy terms of the platform concerned. We are not responsible for that processing.

Licence checks for Pro

When you enter a Pro licence key in the extension, it sends that key together with a device ID to our licence server, which is also hosted by IONOS. The device ID is a random identifier the extension creates itself. It contains neither your name nor any information about your device. After that, the extension asks about every 24 hours whether the licence is still valid.

The server stores the licence key, the email address of your PayPal account, the plan, status and term of the licence, the ID of your PayPal subscription, and, for each device the key was activated on, the device ID and the browser identification (user agent). As with every request to a server, log files with your IP address are also created.

This processing serves the performance of the contract for the Pro version (Art. 6 (1) (b) GDPR). The section on retention periods applies, in particular the retention periods under tax and commercial law. If you use Prefill for free only, nothing is sent to our server.

Payment via PayPal

The Pro version is billed through PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. You enter your payment details directly with PayPal, and we never see them. From PayPal we receive the email address of your PayPal account and the ID, plan and status of your subscription, so that we can send you the licence key and manage the licence.

The legal basis is Art. 6 (1) (b) GDPR. Processing by PayPal itself is governed by PayPal’s privacy statement, which you can find on paypal.com.

5. Plugins and tools

Fonts, hosted locally

This website uses only locally stored font files to display type consistently. They sit on this website’s own server and are delivered from there. Your browser makes no connection to third party servers for them.

In particular, neither Google Fonts nor Font Awesome nor any comparable external font service is embedded. No transfer of your IP address or other data to third parties takes place.

If your browser does not support the font used, a standard font from your operating system is used instead.

Transfers to third countries

This website embeds no services from providers outside the European Union, and no personal data is transferred to the United States or other third countries through this website. If you book Pro through PayPal, PayPal processes your data under its own terms, possibly also outside the European Union.

Sources and references

Legal bases and competent authorities:

• Regulation (EU) 2016/679 (GDPR)the full text of the General Data Protection Regulation.
• Bundesdatenschutzgesetz (BDSG)supplementary national rules.
• Federal Commissioner for Data Protection and Freedom of Informationthe competent supervisory authority at federal level.
• Datenschutzkonferenz (DSK)joint interpretation guidance from the German supervisory authorities.