Privacy policy

The short version

No accounts, no advertising, no sale of data, no third-party trackers. The app collects anonymous usage statistics to learn whether it actually helps people fall asleep — you can switch that off in Settings, and switching it off is respected immediately. This website sets no cookies.

Who is responsible

SaaSQuadrat e.U., DI (FH) Andreas Scheucher, Föllinger Straße 116, 8044 Graz, Austria. Privacy questions: contact@SaaSQuadrat.com.

This website

The site is static and sets no cookies. Our hosting provider processes technical access data (such as IP addresses) in server logs for operation and security — legal basis: legitimate interest, Art. 6(1)(f) GDPR; logs are kept briefly and not used to identify visitors.

One exception to the no-third-party rule: the press page shows small preview images of the listed articles. These are loaded through the image proxy wsrv.nl (images.weserv.nl), so your browser contacts that service (transmitting your IP address) instead of each publisher; the request carries no referrer and sets no cookies. Legal basis: legitimate interest, Art. 6(1)(f) GDPR, in illustrating the press coverage without sending your visit to a dozen news sites.

We may later add self-hosted, cookie-free visitor statistics (aggregate page counts only, no cross-site tracking, no personal profiles). This policy will be updated before that happens.

The app: anonymous usage statistics

The app records whether sleep sessions succeed — events such as “session completed”, “session stopped”, and an optional one-tap morning check-in. These are tagged with a random installation ID (a UUID generated on your device). There is no advertising identifier, no fingerprinting, no account, and therefore nothing that identifies you as a person; the app never shows an App Tracking Transparency prompt because it does not track.

Sending is deferred: nothing is transmitted during a sleep session. Statistics are on by default and can be switched off in Settings at any time — switching off sends one final, empty “disabled” signal, stops all collection immediately and deletes the local queue.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in understanding whether the product works. The data is stored on our own server, not with an analytics company; backups are encrypted.

The launch mailing list

The website offers a voluntary mailing list for product announcements only: new releases and newly supported languages. We store your email address and the word-list language you select, on our own self-hosted mailing software on our own server — no third-party newsletter service.

Subscription is double opt-in: you receive a confirmation email, and only your confirming click subscribes you — that click is also the record of your consent (legal basis: Art. 6(1)(a) GDPR). Every email contains an unsubscribe link; unsubscribing revokes consent and you can additionally export or permanently erase your data yourself via the links in any email.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority (in Austria: Datenschutzbehörde, dsb.gv.at).

One honest caveat (Art. 11 GDPR): because the usage statistics are keyed only by a random installation ID, we cannot tell which data belongs to which person — so we may be unable to link a request to any stored data. The effective way to erase future data is the switch in Settings; deleting the app ends collection entirely.

Changes

This policy will be updated as the product evolves — for example when website statistics are added. The current version always lives at this address.