typest.app
Download
← Back to homepage

Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the GDPR is:
typest.app Einzelunternehmen
Owner: Luca Elias Themann
Gewerbegebiet 5, 25946 Nebel
Email: privacy@typest.app

2. General information on data processing

We generally only process our users' personal data to the extent necessary to provide a functioning website along with our content and services. Personal data is processed regularly only with the user's consent or on the basis of a legal permission (Art. 6(1) GDPR).

3. Hosting, server log files and visitor counting

This website is hosted by neroserv UG (neroserv.de). When you visit the site, the host automatically collects information in so-called server log files that your browser transmits (including IP address, date and time of the request, browser used, referrer URL). This data is used to technically operate and secure the website (Art. 6(1)(f) GDPR) and is not combined with other data sources. Server log files are only kept for as long as necessary for these purposes; the exact retention period follows our host's settings.

To know how many people visit this website, we count page views ourselves on our own server, without any external service. When you open a page, your browser sends the address of the page (e.g. "/ueber") and, on the first page, the website you came from (referrer) to our server. Of this, only daily totals are stored: the number of page views and visitors, the views per page and the visitors per source (the domain only, such as "google.com"). So that a visitor is counted only once per day, we derive a shortened hash from your IP address, your browser identifier (user agent) and the date using a secret key; it cannot be reversed, is kept only until the end of the day and is then deleted. We do not store the IP address itself. No cookies are set, nothing is stored in your browser, and the stored figures cannot be linked to any person. The legal basis is our legitimate interest in measuring the reach of our website and improving it (Art. 6(1)(f) GDPR); you can object to this at any time (Art. 21 GDPR, see section 10).

4. Cookies and local storage

Without your consent, this website does not use any analytics, tracking or marketing cookies. The Google Ads tag is, however, loaded as soon as a page is opened and behaves as described in section 5 until you make your choice. Your browser's localStorage only holds purely technical interface preferences – such as the selected language code under the key “typest_lang”, the mute state of the chat assistant under “typest_chat_sound”, or your choice in the consent banner (selection and time) under “typest_consent”, so that the banner does not reappear on every visit and your choice is respected. This storage is technically necessary, contains no personal data, and is exempt from the consent requirement under § 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). The chat assistant runs entirely in your browser; your messages are not sent to our server or to third parties.

5. Google Ads and consent banner

We advertise typest.app through Google Ads. To measure whether visits to this website come from one of our ads, the Google tag (gtag.js) is included on every page. It is loaded from Google servers as soon as a page is opened (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, USA, and other Google companies may also be involved). In doing so, Google unavoidably receives your IP address, browser and device information, the page visited including the referrer, and the time of the visit – even if you have not yet made a choice or have declined.

Until you agree, the tag runs in Google Consent Mode with all consent parameters (ad_storage, ad_user_data, ad_personalization, analytics_storage) set to “denied”: no cookies are set, no existing advertising identifiers are read, and the click ID (gclid) of an ad is removed from the requests. Google then only receives the connection data mentioned above and, according to its own statements, may use it for aggregated, statistical measurement. For this transmission, which is unavoidable when a page is opened, we rely on our legitimate interest in measuring the success of our advertising (Art. 6(1)(f) GDPR); you can object to it (Art. 21 GDPR, see section 10). If you want to prevent the transmission technically, you can block the Google script from loading in your browser or with an ad blocker; the website then remains fully usable.

If you agree in the banner, the tag switches to “granted” (ad_storage, ad_user_data, ad_personalization): Google may then store cookies such as “_gcl_au” and “_gcl_aw” (each with a lifetime of up to 90 days) as well as cookies from the domains google.com and doubleclick.net, and evaluate click IDs. Google uses this data to measure the success of our ads and to optimise them; in doing so, Google may link visits to ad clicks and build audiences for remarketing. Google also processes some of the data for its own purposes; Google's privacy policy (policies.google.com/privacy) applies to this. The legal basis for this is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). The data may be transferred to the USA; Google is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection (Art. 45 GDPR). We store your choice in your browser's localStorage under the key “typest_consent”; it remains valid until you change it or clear your browser's storage. You can withdraw your consent at any time with effect for the future by clicking “Cookie settings” in the footer of any page and choosing “Decline”; the lawfulness of processing carried out until then remains unaffected (Art. 7(3) GDPR). When you withdraw, we set the tag back to “denied” and delete the cookies Google has set on this website (“_gcl_*”); cookies that Google has set on its own domains can be deleted in your browser settings.

6. External interfaces of the app and website

The typest.app desktop software automatically requests data from external services for certain features; this website itself does not load any third-party content when you visit it – except for the Google Ads tag (section 5). Unless stated otherwise below, the legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in offering you the respective feature without maintaining costly infrastructure of our own or bloating the installer with unnecessary size; your IP address is technically unavoidably transmitted to the respective provider and processed there solely to answer the request.

When the software starts and via the "Check for updates" button, the app asks GitHub (github.com, "Releases" section; GitHub, Inc., part of Microsoft Corporation, USA) whether a newer version is available; on Windows and macOS, an update is then downloaded in the background. Your IP address is transmitted in the process. The legal basis is our legitimate interest in current and secure program versions (Art. 6(1)(f) GDPR). If the image model for "Remove background" is not part of the installation package, the app downloads it once from GitHub the first time you use the feature.

The software's font manager is locked when you open it: as long as you do not agree in the notice shown there, no data is requested from Google or GitHub and search stays disabled. If you agree, the app fetches the font list (names, categories, license information) directly from fonts.google.com, operated by Google Ireland Limited; an individual font is only loaded from the Google Fonts repository on GitHub (api.github.com and raw.githubusercontent.com, GitHub, Inc.) once you click on it (preview) or install it. Unlike the other services, the legal basis here is your consent (Art. 6(1)(a) GDPR), which you give by clicking "Agree and use Google Fonts"; it only applies until you close the app and can be withdrawn at any time with effect for the future by closing the app. The app's interface fonts are built in, so no fonts are loaded from Google at startup.

The free Font Awesome icons are included in the software; for the paid Pro and Pro+ icons you can optionally connect your own Font Awesome account in the software's Icons section. Only when you enter an API token from your Font Awesome account there and click "Connect" does the app send this token to Font Awesome (api.fontawesome.com; Font Awesome, USA). After that it requests icon data for your search terms – only when you display or search Pro or Pro+ icons; the token, your search terms and your IP address are transmitted. The token is stored encrypted only on your device until you remove it in the app's settings; the app does not store the icons themselves. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by clicking "Connect" and can withdraw at any time with effect for the future by removing the token in the settings. Font Awesome's privacy policy applies to your Font Awesome account itself.

GitHub, Google and Font Awesome are certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection for the transfer to the USA. In none of these cases are your own files (fonts, images, brandboards, assets) transmitted to the providers listed – only catalog, version, program or icon data is requested. The bundled icon sets are included in the software and need no internet connection.

7. Downloading the software

The download button on this website lets you download the typest.app desktop application. The download is not served from our own server but from GitHub (GitHub, Inc., part of Microsoft Corporation, USA; certified under the EU-U.S. Data Privacy Framework): when you click the button you are redirected to github.com and its delivery servers, your IP address is transmitted to GitHub in the process, and GitHub's own privacy notices apply there. The legal basis is our legitimate interest in providing the software reliably and free of charge (Art. 6(1)(f) GDPR). Installing and using the software happens locally on your device. We count clicks on the download button anonymously on our server, only with the date and platform (Windows or Mac) – without your IP address, cookies or any other information about you.

8. Contacting us (email and contact form)

If you contact us by email or via the contact form in the legal notice, your details (email address, and where applicable your name and message) are stored in order to process your request. With the contact form, our server forwards your message to us as an email; it is not saved in a database there. After you submit, you automatically receive a confirmation email at the address you entered (without the content of your message). To protect against abuse, a hash of your IP address is kept for at most one hour and a hash of your email address for at most 24 hours to limit the number of messages and confirmations. Our mailbox is operated by Microsoft (Outlook / Microsoft 365, Exchange Online); Microsoft is certified under the EU-U.S. Data Privacy Framework. The legal basis is Art. 6(1)(b) or (f) GDPR. We delete your request once it has been fully handled and no statutory retention obligations apply. Apart from that, we do not pass on this data without your consent.

9. Reviews in the app

You can rate typest.app right in the desktop app. The app then sends your star rating, your text, the name you enter, the app language, the app version, the operating system (Windows or macOS) and a random ID of your installation to our server (hosting: see section 3). We only store the ID as a hash; it makes sure each installation can leave one review and a new review replaces the old one. To prevent abuse, a hash of your IP address is kept for at most one hour. We are notified of each new review by email (mailbox at Microsoft, see section 8). After checking it, we publish the review with name, stars, text and date on this website – so feel free to use a first name or a pseudonym. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by submitting and can withdraw at any time by emailing privacy@typest.app; please include the name and date of the review and we'll delete it. Rejected reviews are deleted right away; published ones are kept until you ask us to delete them or we discontinue the review feature.

10. Your rights

You generally have the following rights against us:

  • Access to the data we hold about you (Art. 15 GDPR)
  • Correction of inaccurate data (Art. 16 GDPR)
  • Deletion of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data, in particular with the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD, www.datenschutzzentrum.de).