Privacy

Privacy policy

Last updated: November 2026

This English version is a convenience translation. In case of doubt, the German version applies.

1. Controller

Pascal Grommisch
Peter-Früh-Weg 1
87480 Weitnau, Germany
Email: mrpg@gmx.de

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Overview

This website uses no cookies, no analytics or tracking tools, no advertising and no social media plugins. Fonts are not loaded from third-party servers. If you switch the language or the color scheme, your browser stores this choice locally (localStorage). The MP3 Converter additionally stores your settings (name template, MP3 quality, rounding and ID3 option) locally in your browser. These entries are technically necessary for the functions you choose (Section 25(2) no. 2 TDDDG), are not transmitted to us and can be deleted at any time in your browser settings. Personal data is processed only to the extent necessary to operate the website or to answer your enquiry.

3. Hosting and delivery (Cloudflare)

The website is delivered via Cloudflare Pages and Cloudflare Workers. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the website, Cloudflare processes technically necessary data, in particular your IP address, the date and time of access, the page requested, the browser type and the operating system. This data is required to deliver the website, to ensure its security (for example defense against attacks) and to analyze errors.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a secure and stable delivery of the website. We do not use web analytics ourselves and do not evaluate access data. A data processing agreement (Art. 28 GDPR) exists with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR); the EU Standard Contractual Clauses also apply. Further information: cloudflare.com/privacypolicy.

To protect against spam, the email address shown on the website is obfuscated by Cloudflare and only made readable in your browser by a script. No additional personal data is collected and no cookies are set in the process.

4. Contact form and email

If you write to us via the contact form or by email, we process the data you provide (name, email address, topic, message) solely to handle your enquiry. The form data is not stored on the website. It is forwarded as an email to our GMX mailbox via Cloudflare’s email service (Cloudflare Email Routing, provider see section 3). The mailbox provider is 1&1 Mail & Media GmbH, Brauerstraße 48, 76135 Karlsruhe, Germany.

The legal basis is Art. 6(1)(b) GDPR where your enquiry aims at a contract or pre-contractual measures, and otherwise Art. 6(1)(a) GDPR (your consent via the checkbox) and Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). You can withdraw any consent you have given at any time with effect for the future by email.

Your enquiry is deleted once it has been finally handled and no statutory retention obligations apply, but no later than 12 months after the last communication.

To protect against automated spam messages, the form contains a field that is invisible to humans and checks the time taken to fill it in. We also use Cloudflare Turnstile on the contact page (provider see section 3). Turnstile uses technical characteristics of your browser and your IP address to check whether the request comes from a human. It sets no cookies for advertising or analytics purposes and creates no user profiles. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protection against misuse and spam. Turnstile is loaded as soon as the contact page is opened. When you submit the form, the function that receives it (a Cloudflare Worker) briefly processes your IP address to limit the number of messages per sender and passes it to Cloudflare together with the Turnstile result for verification. We do not store the IP address ourselves. Further information: Turnstile privacy information.

5. Browser tools (File Repair, MP3 Converter, PassSpiel 18)

The tool at /datei-reparatur/ processes the files you select exclusively locally in your browser. The files and their contents are not transmitted to us or to third parties and are not stored.

The required program libraries (JSZip, pdf-lib) are served by mrpg.dev itself. No third-party service is called for this.

The MP3 Converter at /mp3-converter/ converts the video and audio files you select to MP3 exclusively locally in your browser and estimates BPM and key. The files are not uploaded or stored. The program and its encoder library (lamejs) are served by mrpg.dev itself. Settings are stored locally as described in Section 2.

PassSpiel 18 at /passspiel/ runs entirely in your browser; no personal data is transmitted to us or to third parties.

6. Links to other services

This website links to other projects, for example SpritRadar at sprit.mrpg.dev. Their own privacy notices apply to those services. No data is transmitted until you click a link. Depending on use, SpritRadar processes, among other things, location and search details and integrates external map and place-search services; details are in the SpritRadar privacy policy.

Donations via Ko-fi: You can make voluntary donations via the page ko-fi.com/mrpgdev. The payment is handled by the provider Ko-fi; depending on the payment method chosen, a payment service provider also processes the data. The provider processes the data necessary for the payment (for example name, email address, payment details, amount and optionally your message). We only receive the information needed to assign and confirm the donation. We do not see the payment data itself. The legal basis is Art. 6(1)(b) GDPR (processing of the donation). The provider’s privacy notices apply.

7. Your rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw any consent you have given (Art. 7(3)). An informal email to mrpg@gmx.de is sufficient.

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

8. Security

The connection to this website is encrypted using TLS (HTTPS). There is no automated decision-making or profiling. Providing your data is neither legally nor contractually required; however, without the details in the contact form we cannot answer your enquiry.

9. Changes

We will adapt this privacy policy if the website or the legal situation changes. The version published here applies.