Privacy Policy

How we collect, use, and protect your personal data in compliance with the GDPR.

We may update this privacy policy. Significant changes will be announced on this page.

Last updated: August 16, 2025

1. Data Controller

mnsy.dev

Contact: [email protected]

2. What Data We Collect
  • Email address - required to create an account and log in via magic links.
  • IP address (encrypted) - used temporarily for security and rate-limiting.
  • Site preferences - optional settings you choose (e.g. display preferences).
3. How We Use Your Data
  • To provide account login and authentication (magic links sent to your email).
  • To protect the service against abuse (rate-limiting by encrypted IP).
  • To save and apply your site preferences.
  • We do not use your email for marketing or newsletters.
4. Legal Bases for Processing
  • Performance of a contract (GDPR Art. 6(1)(b)): providing login via email.
  • Legitimate interest (GDPR Art. 6(1)(f)): ensuring site security and preventing abuse.
5. Data Retention
  • Emails - stored until you delete your account or after 12 months of inactivity.
  • Encrypted IPs - stored only as long as necessary for rate limiting, no longer than 12 months.
  • Preferences - stored until your account is deleted.
6. Data Sharing

We use trusted service providers to deliver our services:

  • Mailersend (USA) - for sending login emails. Data transfers are protected under the EU-US Data Privacy Framework.
  • Hetzner Hosting Provider - located in the EU.

We do not sell or share your data with third parties for advertising.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Correct or update your data.
  • Request deletion of your data (“right to be forgotten”).
  • Request a copy of your data in a portable format.
  • Object to or restrict certain processing.

To exercise your rights, please open a support ticket via the support page or contact us at [email protected].

8. Complaints

You also have the right to lodge a complaint with your local data protection authority.