Privacy – lighthours

Questa pagina esiste solo in tedesco e inglese. Fa fede la versione tedesca.

In short

lighthours works without accounts, without cookies and without advertising networks. There are no user profiles, no recognition across visits and no selling of data. Everything that does occur is described below.

Controller

The entity named in the legal notice is also responsible for data processing on this website.

Visiting the site

When you open a page, your browser transmits technically necessary details to the server: IP address, time, requested address, browser identification. This happens with every web server and is stored by the hosting provider in server logs. The legal basis is Art. 6(1)(f) GDPR – the legitimate interest in technically sound operation. The application itself keeps no access logs of its own and does not evaluate this data. Retention of the server logs follows whatever your hosting provider states in its own privacy statement.

No cookies

No cookies are set – neither first-party nor third-party. The only thing stored is your choice of colour mode (light, dark or system) in your browser's local storage under the key lh-theme. That value never leaves your device and is not transmitted to the server. It is only created if you actually use the switch, and can be deleted through your browser settings at any time.

Place search

When you enter a place in the calendar generator, your search term is passed to Nominatim, the search service of the OpenStreetMap Foundation. That request is made by the server, not by your browser. OpenStreetMap therefore learns your search term, but not your IP address.

Search results are cached on the server for seven days to reduce load on the free service. Only the search term and the result are stored, nothing that points back to you. The legal basis is Art. 6(1)(b) GDPR – without this lookup the requested calendar cannot be created.

Map display

Once you have selected a place, a map appears. The map tiles are loaded directly by your browser from tile.openstreetmap.org. The OpenStreetMap Foundation thereby learns your IP address and the map section. Before that the map is not loaded at all – anyone who only reads the home page establishes no connection there. The OpenStreetMap Foundation privacy policy applies.

Fonts and libraries

All fonts and the map library are hosted on this server. No Google Fonts and no content delivery networks are embedded. The only third-party script is the visitor measurement described in the next section.

Visitor measurement

To see how many people visit this site, a measurement using Rybbit is in place. The software runs on a server of our own at analyse.3pixelhoch.de; the data never leaves that server and is not passed to anyone.

No cookies are set and no IP addresses are stored. What is recorded: the page visited, the referring page, browser and operating system, screen size, and the country derived from the IP address – the address itself is not kept. To tell sessions apart, Rybbit derives an identifier that is salted anew every day. Recognition beyond that day, or across other websites, is therefore not possible, and no user profiles are built.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is understanding the reach of this service without processing personal data. Since no information is stored on or read from your device, no consent under § 25 TDDDG is required. You can object via your browser's Do Not Track setting or any content blocker.

Anonymous count of active calendars

The footer states how many calendars are currently active. That number comes about as follows: subscribed calendars are fetched regularly by your calendar app. On each fetch the server derives a 16-character hash from the calendar settings – rounded coordinates, selected event types, period – and stores only that hash in a per-day file.

Not stored are: IP address, browser identification, time of day, or any attribute that could link two calendars to the same person. Coordinates enter the hash rounded to two decimal places, roughly one kilometre. Files older than 40 days are deleted. The legal basis is Art. 6(1)(f) GDPR – the legitimate interest in rough usage figures without any personal reference.

Calendar subscription

A calendar subscription is an ordinary internet address. All settings – coordinates, period, event types – are contained in that address itself. Nothing about your calendar is stored on the server; it is recalculated on every request. Anyone who knows the address can retrieve the calendar, so treat it like a personal link.

Sending by email

If the operator has enabled this feature, you may optionally have the calendar link sent to you by email. Your address is used for that single message and is not stored afterwards – no mailing list, no newsletter. The legal basis is Art. 6(1)(a) GDPR, your consent given by submitting the form.

To prevent abuse, the number of messages per hour is limited. For that the server stores a shortened, daily-salted hash of your IP address for at most two hours. The IP address cannot be recovered from that value.

Support

The “Buy me a coffee” button is an ordinary link to Buy Me a Coffee. No script from that provider is embedded – you only leave this site once you click. Their terms apply from that point on.

Your rights

You hold the rights under Art. 15 to 21 GDPR: access, rectification, erasure, restriction of processing, data portability and objection. One note in all openness: since no personal data is stored here in a form that could be attributed to you, a request for access will as a rule simply turn up nothing. You are nonetheless welcome to write to the address given in the legal notice.

You also have the right to lodge a complaint with a supervisory authority, Art. 77 GDPR.

Changes

This statement describes the state of the software as of the date given below. Because lighthours is open source, you can verify in the source code at any time whether it still holds.

Aggiornato il 08.08.2026