Privacy Policy

1. General information

Protecting your personal data is very important to me. I only process your data in accordance with applicable laws (GDPR, German DDG). This privacy policy explains the key aspects of how data is processed on this website.

2. Controller

3. Hosting

This website is hosted by Cloudflare, Inc. (USA). When you visit the site, Cloudflare may process your IP address for technical reasons. This is necessary to deliver the website and protect it from attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Cloudflare is certified under the EU-US Data Privacy Framework (DPF), ensuring an adequate level of data protection for transfers to the USA.

4. Analytics, tracking, and cookies

This website uses Cloudflare Web Analytics, a cookie-free analytics tool provided by the hosting provider Cloudflare (see section 3). Only aggregated usage data is collected (page views, referrer, browser, operating system, country). There is no individual visitor tracking or cross-site tracking. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in analyzing website usage). For more information, see Cloudflare's privacy policy.

Beyond that, this website uses no additional tracking tools, analytics services, or advertising cookies. Only browser sessionStorage is used to store the admin authentication key during a browser session. This data never leaves your browser and is not shared with third parties.

5. Claim flow and wallet data

When a user scans a claim QR code, the following data is transmitted to the server:

• Claim code: a unique, one-time code used to authorize the airdrop.
• Wallet address: the Cardano address where tokens should be sent.

The wallet address and claim status are stored in a Cloudflare D1 database to prevent duplicate claims and to track campaign progress. No names, email addresses, or other personal data is collected. Identification is solely through the pseudonymous wallet address. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Blockchain data (transactions, metadata, block times) is publicly visible. This is inherent to blockchain technology and is beyond my control.

6. Third-party API services

To submit transactions and retrieve blockchain data, this website queries the KOIOS REST API (koios.rest), an open-source Cardano blockchain data provider. Transaction hashes and wallet addresses may be transmitted to KOIOS. These are pseudonymous blockchain identifiers, not personal data in the traditional sense. Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest).

7. Rate limiting

To prevent abuse, this website implements rate limiting based on IP addresses. Rate limit counters are stored temporarily in Cloudflare KV and automatically expire. No IP addresses are permanently stored. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting the service).

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. If you believe the processing of your data violates data protection law, you may lodge a complaint with the supervisory authority. In Baden-Württemberg, this is:

Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Königstraße 10a
70173 Stuttgart, Germany
https://www.baden-wuerttemberg.datenschutz.de

9. Objection to unsolicited emails

The use of contact data published as part of the legal notice obligation for the purpose of sending unsolicited advertising and information materials is hereby objected to.