Data Privacy

Hosting

rascher.online is served by a Go application hosted on Fly.io in the Frankfurt region (fra). Fly.io processes technical request data that is necessary to deliver the site, route requests and operate the service reliably.

Fly.io is operated by a US company. Data transfers are covered by Fly.io's data processing agreement and standard contractual clauses. See the Fly.io Privacy Policy and Fly.io Data Processing Addendum.

Cookies

rascher.online uses strictly necessary cookies for login, OAuth state handling and member sessions. These cookies are used only to complete authentication and keep a signed-in session available.

The site does not use tracking cookies, tag managers or advertising third parties.

Identity

Account registration, invitations, login, password reset, member access and admin access are handled through cidaas. rascher.online receives the user ID, email address, groups and roles needed to create a local website session and protect the members and admin areas.

Passwords are processed by cidaas and are not stored by rascher.online.

Operating Notes

Operating Notes is a newsletter signup only. It is separate from member access and does not create a cidaas account. If you subscribe, rascher.online sends your email address, consent state and signup context to beehiiv.

beehiiv handles double opt-in, newsletter delivery, unsubscribe handling, bounces and complaints. Delivery uses the newsletter domain notes.rascher.online and beehiiv-managed SendGrid infrastructure. Newsletter links may use branded beehiiv link domains below notes.rascher.online. You can withdraw consent at any time through the unsubscribe link in the newsletter or by contacting contact@rascher.online.

Server Logs and Security

Fly.io and the application may record technical log data such as request time, requested path, response status and network metadata. The request IP address may be logged briefly for operational security, abuse prevention and debugging.

This data is not used to build personal profiles. Logs are kept only as long as needed for those operational purposes or as required by law.

Your Rights

You can request access, correction, deletion, restriction of processing, data portability and objection where the GDPR grants these rights. For privacy requests, contact contact@rascher.online.

You can also lodge a complaint with a competent data protection authority.

International Transfers

Hosting with Fly.io and newsletter delivery through beehiiv may involve transfers of technical data to the United States. These transfers are covered by data processing agreements and standard contractual clauses.

Scope

This notice describes the actual processing on rascher.online to the best of the operator's knowledge. It is not legal advice.