Privacy policy

Deutsche Fassung · This is a translation. If the two versions differ, the German version applies.

Last updated: 21 October 2026

1. Controller

The controller for the processing of personal data on this website is:

We have not appointed a data protection officer because the legal requirements for this are not met.

This policy covers the website maverk.app. Our apps have their own privacy policies: Ikona and Halflight.

2. In short

• The website sets no cookies and uses no analytics or advertising services.
• Fonts, scripts and images come from our own server. There are no forms.
• When you open a page, our hosting provider Cloudflare processes technical access data.

3. Hosting, delivery and protection of the website

The website is delivered through Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare runs a worldwide network of servers (content delivery network) and protects the website against overload and attacks. With every request Cloudflare processes:

• the IP address of your device,
• the date and time of the request,
• the address requested and the amount of data transferred,
• your browser and operating system (user agent),
• where applicable, the page you came from (referrer).

The website cannot be delivered or protected against misuse without this data. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable operation of the website. We do not use this data for marketing or statistics.

Cloudflare also tells your browser to report connection errors to Cloudflare (Network Error Logging). Such reports contain the address requested, the type of error and technical connection data. They help to find faults in Cloudflare's network; legal basis is also Art. 6(1)(f) GDPR.

Cloudflare processes the data on our behalf under a data processing agreement (Art. 28 GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA rely on the European Commission's adequacy decision (Art. 45 GDPR) and additionally on the Standard Contractual Clauses (Art. 46(2)(c) GDPR). More information: cloudflare.com/privacypolicy. Cloudflare deletes access data after its own short periods; we do not keep log files ourselves.

4. Storage in your browser

The website sets no cookies. To keep the view you chose while you click through, it stores a single entry in your browser's session storage: which tab you opened last. The entry never leaves your device and is deleted when you close the tab. This storage is strictly necessary for the display you asked for (§ 25(2) no. 2 TDDDG).

5. Encryption

The website is only available over an encrypted connection (HTTPS/TLS).

6. Contacting us by email

When you write to us, we process your email address, your name if you give it, and the content of your message in order to answer you. Legal basis: Art. 6(1)(b) GDPR where the matter concerns a contract with us, otherwise Art. 6(1)(f) GDPR (answering enquiries).

Emails to our addresses are received by the service Forward Email (Forward Email LLC, USA) and forwarded to our mailbox at Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), where they are stored. Forward Email processes the messages on our behalf; for the transfer to the USA we have agreed the European Commission's Standard Contractual Clauses with Forward Email (Art. 46(2)(c) GDPR). Google processes the emails in the mailbox under its own terms as an independent controller.

We delete the correspondence once your matter is settled. Business letters are kept as long as commercial and tax law requires (up to six years under § 257 HGB and § 147 AO).

7. Recipients

Data is only received by the providers named above (Cloudflare, Forward Email, Google) and by authorities where the law obliges us. We do not sell data.

8. No automated decisions

We make no automated decisions within the meaning of Art. 22 GDPR and do not create profiles.

9. Your rights

You have the right to

• access your data (Art. 15 GDPR),
• have incorrect data corrected (Art. 16 GDPR),
• have your data erased (Art. 17 GDPR),
• restrict processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• withdraw consent you have given, with effect for the future (Art. 7(3) GDPR). Processing before the withdrawal remains lawful.

An informal message to hi@maverk.app is enough for any of these requests.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

10. Changes

We update this policy when the website or the law changes. The version published on this page applies.