Privacy policy

This policy explains how personal data is handled when you visit tidymeteor.com or contact me about this website. It does not cover data processing inside the individual iOS apps.

1. Who is responsible?

TidyMeteor is an app development brand operated by Matthias Orgler as an individual freelancer. It is not a separate legal entity. The controller responsible for this website is:

2. Visiting the website and Cloudflare hosting

The website is hosted on Cloudflare Pages. Requests are handled by Cloudflare’s network. To deliver pages and protect the service, Cloudflare processes technical request data, such as your IP address, the requested URL, request time, browser and operating-system information sent by your browser, response status, and referring page where supplied.

This processing is based on Article 6(1)(f) GDPR. The legitimate interests are delivering the website reliably, identifying faults, and protecting it against abuse.

The hosting provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Its affiliates and service providers may also process this information. See Cloudflare’s privacy policy for further details.

3. Cookies, analytics and local resources

The website’s own code does not set cookies, use browser storage, or run analytics, advertising pixels or behavioural tracking. Fonts and images are served with the website rather than loaded from a separate font or image service.

Depending on the security features used for a request, Cloudflare may use technically necessary security cookies to distinguish legitimate traffic from abuse. These are described in Cloudflare’s cookie policy. The site does not use them for advertising or visitor profiling.

4. Contacting me by email

If you email me, I receive your email address, your name if included, the contents of your message, any attachments you choose to send, and technical email metadata. I use this information to answer your enquiry and provide app support. Email service providers process messages as part of delivery and mailbox operation.

For general enquiries and support, the legal basis is Article 6(1)(f) GDPR: the legitimate interest in responding to people who contact me. Where an enquiry concerns entering into or fulfilling a contract with you, Article 6(1)(b) GDPR applies. Article 6(1)(c) GDPR applies where records must be retained to meet a legal obligation.

You choose whether to contact me. Without a reply address and enough information about your question, I may be unable to answer it. Please do not send passwords or unnecessary sensitive information.

5. Links to the App Store and other websites

The app links lead to Apple’s App Store. They are ordinary links, not embedded App Store content. When you follow a link, the destination’s operator processes your visit under its own privacy policy. This website does not process app payments or operate user accounts.

6. How long is information kept?

Technical request data is processed to deliver the requested resources. Security or diagnostic records are retained only for as long as needed to investigate faults or abuse and maintain protection; provider-side retention follows the applicable Cloudflare service settings and documented practices. I do not maintain a separate visitor-analytics database.

Email correspondence is kept while an enquiry and reasonably expected follow-up are being handled. It is then deleted unless it is needed to establish, exercise or defend legal claims, or a statutory record-keeping obligation requires longer retention. In that case, retention ends when the relevant limitation or statutory retention period expires.

7. International processing

Cloudflare operates globally, so request data may be processed outside the EU or EEA, including in the United States. Its Data Processing Addendum describes the safeguards for restricted international transfers, including the EU Standard Contractual Clauses where applicable. You can obtain information about the safeguards through that document or by contacting me.

8. Your data protection rights

Where the GDPR applies, you have the following rights, subject to the conditions and exceptions in the law:

• Access to your personal data (Article 15).
• Correction of inaccurate data (Article 16).
• Erasure and restriction of processing (Articles 17 and 18).
• Data portability where applicable (Article 20).
• Objection, on grounds relating to your particular situation, to processing based on legitimate interests (Article 21).
• Withdrawal of consent at any time where processing relies on consent, without affecting the lawfulness of earlier processing.

To exercise a right, contact [email protected]. There is no automated decision-making or profiling by this website.

You may also complain to a supervisory authority, in particular in the EU member state of your habitual residence, workplace, or an alleged infringement. The Hessian Commissioner for Data Protection and Freedom of Information provides a complaint channel.

9. Changes to this policy

This policy will be updated when the website’s data processing changes. The date above identifies the current version. A privacy notice explains processing; visiting this website does not mean you give consent to optional data processing.

Prepared using PolicyGen and adapted to this website’s actual setup.