Privacy policy

The binding policy for pukalani.app. How we implement privacy technically is documented separately.

Draft – not yet legally binding

This page is a placeholder with the required structure. The binding texts will come from us and our legal advisors before the public launch. Until then: nothing here is something you can rely on.

See the technical implementation

1. Controller

Name and contact details of the controller will follow.

2. What data we process

Server logs, session cookie on sign-in, contact requests – in detail with the binding texts.

3. Legal bases

The legal basis for each processing activity will follow.

4. Hosting and processors

Server location Germany (Hetzner); the full list of processors will follow.

5. Retention

Deletion periods per data category will follow.

6. Your rights

Access, rectification, erasure, restriction, objection, data portability, complaint to a supervisory authority.

7. Cookies

In standard operation we set a strictly necessary session cookie and no advertising cookies. The binding list will follow.

8. Audience measurement

For audience measurement we use Plausible Analytics, self-hosted in the EU. No cookies are set. IP address and browser identification are transmitted to the measurement service, but there they are only processed into a hash that changes daily, to recognise repeat visits, and are not stored. Only aggregated information is stored: the page opened, the source, the country, the browser and the device type.

9. Early access requests

Anyone asking for access during early access gives us their email address and, optionally, a short note. We use both solely to assign access and to write about it — no marketing, no sharing. Declined requests are deleted automatically after 30 days, redeemed ones after 90; open ones stay until they are answered. On request we delete any enquiry right away.

Questions in the meantime? Write to us – we answer.