Who is responsible

The controller responsible for processing personal data on this website is:

[PLACEHOLDER: Name / Company] [PLACEHOLDER: Street address] [PLACEHOLDER: Postal code, City, Country] Email: [PLACEHOLDER: contact email]

Server logs

When you visit the site, our hosting provider and reverse proxy automatically process technical data needed to deliver the pages and keep the service secure: your IP address, the requested URL, the date and time, the referrer, and your browser's user-agent string.

The legal basis is our legitimate interest in operating a stable, secure website (Art. 6(1)(f) GDPR). These logs are kept only as long as needed for operations and security and are then deleted or shortened.

Google Analytics 4

We use Google Analytics 4 (provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) to understand which pages are read and how the site is used in aggregate. Analytics let us improve the content and structure.

In the EU/EEA, Google Analytics runs only after you consent. Until you accept, Google Consent Mode keeps analytics storage disabled — no analytics cookies are set and only cookieless, aggregated signals may be sent. Outside the EU/EEA, analytics are active by default. You can decline at any time, and declining is as easy as accepting.

When enabled, Google Analytics processes pseudonymous usage data such as pages visited, approximate (coarse) location derived from the IP address, device and browser type, and interaction events. We have IP-anonymisation behaviour as provided by GA4. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

Google acts as our processor for analytics. Data may be transferred to Google LLC in the USA; such transfers are covered by the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. Note that authorities in third countries may, in principle, be able to access such data.

Cookies

Only Google Analytics sets cookies, and only after you consent in the EU/EEA:

Your consent choice is stored locally in your browser (localStorage key heatdrop-consent) so we do not ask again. This is not used for tracking.

Withdrawing consent

You can withdraw your consent at any time with effect for the future: clear this site's cookies and site data (including localStorage) in your browser, then reload — the consent banner will appear again and you can decline. You can also block or delete cookies entirely in your browser settings.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• restrict processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interests (Art. 21);
• withdraw any consent you have given, at any time (Art. 7(3)).

To exercise any of these, contact us at the address above.

Right to complain

If you believe our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a data-protection supervisory authority, in particular in the EU member state of your residence, place of work, or the place of the alleged infringement.

Public GitHub data

heatdrop displays publicly available information about open-source repositories (names, descriptions, star counts, READMEs) retrieved from the GitHub API. This is project data, not data about you as a visitor, and is shown for editorial and informational purposes.

Changes to this policy

We may update this policy as the site evolves or legal requirements change. The current version always applies and is published on this page.