Plain-English summary. The legally binding version is the German Datenschutzerklärung.
In short
- No cookies, no advertising, no third-party tracking.
- Hosted on a Hetzner server in Germany; no access logs are kept.
- Self-hosted, cookieless visitor statistics you can switch off below.
- The OpenStreetMap background loads only when you click "Load detailed map".
Hosting
The site runs on a virtual server operated by Hetzner Online GmbH (Gunzenhausen, Germany) in its Falkenstein data centre, which processes data on our behalf (Art. 28 GDPR). To deliver each page the server necessarily processes your IP address, the date and time, the requested address, the referrer and your user agent; a rate limit briefly holds the IP address in memory to stop abuse. Legal basis: Art. 6(1)(f) GDPR.
Neither the application nor the reverse proxy keeps an access log. IP addresses can appear only in the reverse proxy's error log, for example after aborted or malformed connection attempts. That log is cleared weekly, so entries are at most 7 days old.
Visitor statistics (Plausible CE, self-hosted)
We run the open-source Plausible Community Edition at analytics.kraaibeek.tech
on the same server in Germany. No data goes to Plausible Insights or any other
third party, and the map widget (/embed/map) contains no statistics.
On each page view a script sends the page address, the referring page, the scroll depth and the time spent on the page. The server derives browser, operating system and device type from your user agent and the approximate country and region from your IP address. To count a day's visits it forms a checksum from IP address, user agent, domain and a random value that changes daily and is deleted after 24 hours. IP address and user agent are not stored, no cookies are set, no persistent identifiers are created, and only aggregated figures are kept.
Legal basis: Art. 6(1)(f) GDPR. Insofar as the script reading this information counts as access to your device under § 25(1) of the German TDDDG, we rely on § 25(2) no. 2 TDDDG, because plain counting is part of operating the service you requested. This is our own assessment; the German supervisory authorities make no general statement on it.
You can object at any time. The switch below stops the counting in this browser;
you can also block analytics.kraaibeek.tech.
Map and OpenStreetMap
The map first shows country borders from the public-domain Natural Earth data, served
by us, with no third-party connection. Only when you click "Load detailed map" does your
browser fetch tiles from the OpenStreetMap Foundation (Cambridge, United Kingdom) at
tile.openstreetmap.org, delivered through the content delivery network of
Fastly, Inc. (USA). They receive your IP address, the requested tiles, our page address
(referrer) and your user agent.
Legal basis: your consent (Art. 6(1)(a) GDPR), given by the click. The UK is covered by an EU adequacy decision; Fastly is certified under the EU-US Data Privacy Framework, which is also covered by an adequacy decision. How long they keep the data is up to them; see the OSMF privacy policy.
If you tick "Remember my choice", the decision is stored in your browser's local storage. You can withdraw consent at any time: "Background map → Hide it" in the Layers panel, or "Hide OpenStreetMap background" in the map widget, which also deletes the stored entry.
Browser storage
No cookies. We write to local storage only when you act: that you closed the welcome window, your language and country filter in the signals list, the remembered map choice, and your objection to the statistics.
Public JSON API and RSS feeds
/api/signals.json, the per-country and per-language JSON endpoints and the
RSS feeds are open without authentication. The hosting terms above apply; the rate
limit is about 120 requests per minute per IP, above which you get HTTP 429.
If you email us, we process your address and message to answer you. The mailbox is operated on our behalf by ALL-INKL.COM - Neue Medien Münnich (Friedersdorf, Germany). Emails are deleted once no longer needed and no retention duty applies.
What we publish
Signals shown on Hantaflow are derived from public sources. We do not republish article bodies, only metadata (title, source, timestamp, country tag, link) and aggregate counts. See methodology and sources.
Your rights
Under the GDPR you have rights of access, rectification, erasure, restriction and portability (Art. 15-20), the right to withdraw consent at any time for the future (Art. 7(3)), and the right to lodge a complaint with a supervisory authority (Art. 77). Where we rely on Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21). Email thomas@hantaflow.com to exercise any of these. There is no automated decision-making or profiling.
Contact
Privacy questions: thomas@hantaflow.com. Full operator details: Impressum.
As of .
