1. Introduction

This privacy policy informs you about the type, scope, and purpose of the processing of personal data when using our web application ("Application"). We take the protection of your personal data seriously and treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

2. Controller

Andreas Bonke

Kieler Ring 35

18437 Stralsund

Germany

E-Mail: mail@andreasbonke.de

3. Hosting of the application

Our web application runs on a virtual private server (VPS) operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Deployment and operations use our own infrastructure. Server location: Germany.

4. Database

We store your user data in a PostgreSQL database on the same server (self-hosted, server location Germany). Processing is carried out to provide our services (Art. 6 (1) lit. b GDPR).

5. Google Search Console

As site operators, we use Google Search Console to review how public pages appear in Google Search (e.g. indexing, search queries, clicks from search). No analytics tools such as Google Analytics are embedded in the application; Search Console does not build usage profiles of logged-in users inside the app. Where you use Google Search, processing by Google is governed by Google Ireland Limited / Google LLC. Further information: Google Privacy Policy.

6. Use of GitHub for sign-in

We use the GitHub service (GitHub Inc.) for registration and authentication. Before signing in, you must actively agree to our privacy policy. When you sign in to our application via GitHub, personal data from GitHub is processed and transmitted to us. This includes in particular your GitHub username, email address, and, where applicable, other information you have provided in your GitHub profile.

The use of GitHub is based on your consent (Art. 6 (1) lit. a GDPR) as well as for contract performance (Art. 6 (1) lit. b GDPR). Further information on data processing by GitHub can be found in the GitHub Privacy Statement.

7. Demo account

Kronum offers a shared demo account that lets you test the application without registration. When you sign in to the demo, sample data (areas, projects, milestones, tasks, and activities) is loaded into our database and assigned to your demo session.

Demo data is automatically reset after at most 24 hours. Changes you make in the demo account are not permanent and serve solely for product preview. The shared demo account cannot be deleted; you can sign out at any time.

No personal data is required for demo sign-in. Only a technical session is created to enable access to the application (Art. 6 (1) lit. f GDPR — legitimate interest in product demonstration).

8. Data processing when using the application

When using the application, we process the following personal data:

Usage data: IP address, device type, operating system, date and time of access.

Registration data: GitHub username, email address.

Interaction data: Data generated in the course of using the application (e.g. tasks, projects).

The processing of this data is carried out to provide the application and improve the user experience (Art. 6 (1) lit. b and f GDPR). We currently do not send newsletters and do not embed Google Analytics in the application.

9. Storage and deletion of data

We store your personal data only as long as necessary to provide our services or as required by statutory retention obligations. User data is stored in our PostgreSQL database.

GitHub users can delete their account at any time in the settings. This irrevocably removes the user record and all linked content (areas, projects, milestones, tasks, and activities) and ends the active session. Demo data is automatically reset at regular intervals. Activities older than 30 days are automatically deleted.

10. Your rights

You have the right to request information about the personal data stored by us at any time. You may also request the correction, blocking, or deletion of your personal data, insofar as this is legally permissible. You also have the right to object to the processing of your personal data and the right to data portability. To exercise your rights, please contact the address given above.

11. Changes to this privacy policy

We reserve the right to adapt this privacy policy from time to time so that it always complies with current legal requirements or to implement changes to our services in the privacy policy.