◎TickSpot Open app

Privacy Policy

Last updated: July 2026 · The German version at /datenschutz/ is authoritative.

1. Controller

Serdar Freimoser
Schinkelstraße 15, 80805 Munich, Germany
Email: 91Serdar@gmail.com

2. The short version

3. The camera app

TickSpot asks your browser for permission to use your device camera. The camera feed is processed exclusively in your browser to display it with inverted colors. Nothing is uploaded to any server; once loaded, the app also works offline. Frozen images are only saved or shared when you explicitly trigger it yourself, using your device's own save or share function. Legal basis: Art. 6(1)(b) GDPR.

4. Hosting and server logs

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Pages). Cloudflare is certified under the EU-US Data Privacy Framework and also processes data on servers within the EU. When you visit the site, the host automatically processes server log data (IP address, date and time, requested page, browser type, operating system, referrer). This is technically required to deliver the site and keep it secure (Art. 6(1)(f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with the host.

5. Cookies and consent

On your first visit, a banner asks whether we may use cookies and similar technologies for analytics and advertising. Strictly necessary storage (your cookie decision itself and your language choice, stored in your browser's localStorage) is based on § 25(2) TDDDG and Art. 6(1)(f) GDPR. All other services run only after your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can change your decision at any time via "Cookie settings" in the footer.

6. Google Analytics 4

If you have consented, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). It uses cookies and similar technologies to analyze how the site is used. IP addresses are processed in truncated form. Data is typically transferred to Google servers, including in the USA; Google LLC is certified under the EU-US Data Privacy Framework. Legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future. Analytics data is retained for a maximum of 14 months.

7. Google Ads and conversion tracking (planned)

To fund this service, we plan to use Google Ads, including conversion tracking and possibly remarketing, by Google Ireland Limited. These services will also only be activated after your consent via the cookie banner (Art. 6(1)(a) GDPR). Cookies and pseudonymous identifiers may be used to measure ad performance and show interest-based ads. The notes on US data transfers in section 6 apply accordingly.

8. Social media profiles and links

We link to our profiles on social networks (currently LinkedIn, possibly Instagram and Facebook in the future). These are plain links — no social media plugins are embedded, and no data is transferred to these networks when you visit our site. Only when you click a link do you reach the platform, whose own privacy policy then applies (LinkedIn Ireland Unlimited Company; Meta Platforms Ireland Ltd. for Instagram and Facebook).

9. Contact

If you contact us by email, we process your details (email address, message content) to handle your request (Art. 6(1)(b) or (f) GDPR). The data is deleted once it is no longer needed and no statutory retention obligations apply.

10. Your rights

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

11. Changes

We will update this policy whenever our data processing changes — for example, when Google Analytics or Google Ads are actually activated. The version published here applies.