# Privacy Policy

### 1. Data Controller

Heiko Deutsch
Neckarstrasse 26
74906 Bad Rappenau
Germany
Phone: +49 151 40383098
E-mail: me@heikodeutsch.io

### 2. Data we collect

On this landing page we do not actively collect personal data. Only technically necessary session cookies are used. No tracking, no ads.

For the Community Hub (/hub):

- Registration: email, self-chosen display name, password (stored as hash).
- Sessions: IP address and browser info (User-Agent) for account protection.
- Uploads: metadata of your plugins/themes (name, description, version).
- Downloads: count and timestamp. IP stored as hash, deleted after 30 days.

### 3. External services

This page loads fonts and icons via CDNs (Google Fonts, jsDelivr). IP addresses are transmitted to these services as technically necessary. No tracking scripts.

### 4. Cookies

Only technically necessary cookies (session + CSRF). No tracking or advertising cookies.

### 5. Email delivery

Confirmation and password reset emails are sent via our SMTP provider (Resend.com). No other third parties involved.

### 6. Legal basis

Art. 6 (1)(b) GDPR (contract performance) for account data. Art. 6 (1)(f) GDPR (legitimate interest) for technical logs.

### 7. Your rights

You have the right to access, rectification, erasure, restriction of processing, objection and data portability. Please email me@heikodeutsch.io.

### 8. Account deletion

You can have your Hub account deleted at any time, email us with your registered address. All your data will be removed within 7 days. Publicly uploaded plugins/themes are moved to an anonymous Community account unless you explicitly request their deletion too.

### 9. Retention

Account data: as long as your account exists. Download logs: 30 days. Sessions: 30 days or until logout.

### 10. Right to complain

You have the right to file a complaint with a data protection authority. In Baden-Württemberg: Landesbeauftragter für Datenschutz BW.

Last updated: April 2026