Privacy policy

1. Controller

The controller for data processing on this website under the General Data Protection Regulation (GDPR) is:

Projekt Nexapps, nexbrand
Email: contact@nexapps.dev

No data protection officer has been appointed; the conditions of § 38 BDSG are not met.

2. Hosting

This website is hosted by:

ALL-INKL.COM, Neue Medien Münnich
Owner René Münnich
Hauptstraße 68
02742 Friedersdorf, Germany

The host processes the data that arise when the website is called up on my behalf, based on a data processing agreement under Art. 28 GDPR. The servers are in Germany; no data is transferred to third countries.

3. Server log files

When this website is called up, the server automatically collects information your browser sends and stores it in log files:

• IP address of the requesting device
• date and time of the request
• name and address of the file requested
• amount of data transferred and whether the request succeeded
• the page visited before, if your browser sends it
• browser, version and operating system

Purpose: delivering the website, operational security, troubleshooting and fending off attacks.
Legal basis: Art. 6(1)(f) GDPR. The legitimate interest lies in providing the website in a technically sound and secure way.
Retention: the logs are deleted after seven days at the latest. If they are needed to clear up a specific incident, they are kept until it is resolved.

This data is not combined with other data sources and not used to identify you as a person.

4. What is stored on your device

No cookies. This website sets none, neither its own nor anyone else's.

One entry in local storage, only when you trigger it. When you click the light or dark button at the top, the page stores your choice under the name nb-theme in your browser's local storage. The value is exactly one of the words light or dark. It contains no identifier, is never sent to a server and serves only to show the page the way you set it on your next visit.

As long as you don't press the button, nothing is stored and the page follows your device's setting. You can delete the entry at any time in your browser settings by removing the site data for this address.

Under § 25(2) no. 2 TDDDG, no consent is required for this storage, because it is strictly necessary to provide a service you explicitly asked for: you chose the appearance yourself. Beyond that there is no storage and no access to information on your device, which is why this page has no consent dialog.

The language switch remembers nothing. It is an ordinary link to a second page. The copy button on code examples puts the text into your clipboard and nowhere else.

5. No audience measurement

There is no analytics and no usage tracking, neither with a tool of our own nor with anyone else's. No tracking pixel, no statistics software, no visitor profiles.

6. No content from other servers

No fonts, map services, video platforms, ad networks or third-party scripts are embedded. The picture at the top of the home page, too, lives on this server. When you call up this website, your browser connects to no other server.

Links to other projects are ordinary links. Only when you click one does its operator learn of your visit, and then their privacy policy applies.

7. Contact by email

If you write to me, I process your address and the content of your message to answer it. The legal basis is Art. 6(1)(f) GDPR, and for an enquiry about a contract also (b). I delete the message once it is dealt with and no retention duty stands in the way.

8. The application itself

This policy applies to this website. It does not apply to nexbrand as an application: that runs on your own server, and you are then responsible for it. There is no version run by us, no account with us and no place where data from your house or from your clients could end up with us.

Since you, as the operator, are the controller, it needs saying when nexbrand connects to the outside. By default this happens exactly once a day: nexbrand asks GitHub for the newest version. Only that request goes out, with your server's address, but without names, accounts, clients or settings. As the operator you can switch it off on the page “About nexbrand”.

Everything else is off by default or needs an address that you enter yourself: your mail server for invitations and review links, your sign-in provider over OpenID Connect and, if you use the button for it, once your authentik, in which nexbrand creates the provider and the application. Collecting from websites and GitHub repositories fetches the addresses someone enters there and is off by default. An AI service per account is off by default; if it is allowed, the measured values of a collection or the description from the wizard go to the service the account entered itself, and every request is listed in that account for 14 days. Public pages and reviews are off by default; if you switch them on, a shared version can be read by everyone who has the link. What each provider does with the data is in their terms.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Contact the address above for this.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), for example the data protection authority responsible where you live.

10. Changes

If something about the website changes, this policy will be adjusted. You will always find the current version at this address.