Privacy policy

Controller

What this site does not do

• No cookies, neither our own nor anyone else's.
• No cross-site tracking and no analytics provider.
• No accounts, no sign-up, no email addresses.
• No content from third-party providers. Fonts are served from here, and measurement runs on a server of our own (m.hikai.de).
• No sharing with third parties and no transfer outside the EU.

Server logs

Access logging is switched off at our host. Your IP address is technically needed to deliver the page to your browser, but it is not written to any log file afterwards.

This means the identifier of a saved list is not recorded anywhere either. It travels in the path of the request when the list is loaded, but nothing logs it. Who can open your list is therefore entirely up to you and whether you pass the link on — note that it does appear in your browser history.

This does not cover what the host has to process briefly at infrastructure level, for instance to fend off attacks. We have no influence over that; see the host's own privacy policy for details.

Storage in your browser

Your books and assumptions are kept in your browser's local storage so they are still there on your next visit. This data never leaves your device and is not visible to us. These are not cookies but storage the function you requested needs directly.

Saved lists (secret link)

When you create a link, your list is stored on the server: title, format, list price, tax rate, royalty rate, printing cost and your assumptions about margin and conversion rate, along with the time of creation and last change.

The list sits behind a random 128-bit identifier. There is no endpoint that lists stored records, and without the identifier a list cannot be found. No name or other personal detail is required — what you type into the title field is up to you.

The legal basis is Art. 6 (1) (b) GDPR: storage happens at your explicit request in order to provide the function. The data stays until you delete it, using the "Delete link" button in the "Your link" dialog. After that the list is irrecoverably gone.

Abuse protection

To stop the store being filled automatically, the number of new lists per caller per hour is limited. For this we do not store the IP address but a hash of the IP address and a random value known only to the server. That hash cannot be reversed and is deleted after one hour. Legal basis: Art. 6 (1) (f) GDPR.

Audience measurement

We use Matomo, an analytics application we host ourselves at m.hikai.de. A small script in your browser reports which page you opened. No cookies are set, nothing is stored on your device and nothing is read from it. Because nothing is stored on or read from your device, we consider no consent under section 25 TDDDG to be required — and for the same reason there is no cookie banner.

Recorded are the page and its title, the referring page, load time, the time on page reported when you leave, and clicks on outgoing links. On top of that comes what your browser sends with every request anyway: the user agent, from which Matomo derives browser and device type, and the IP address. The script itself reads nothing from your device — not your screen resolution, not installed extensions, not your time zone.

The part of the address after the hash is stripped. That is where the key to a saved list lives — it never reaches the measurement and is not stored there.

Matomo truncates your IP address before storing it. A full IP address never enters the database, and a truncated one yields a country at best, no city and no person. So that related requests appear as one visit, Matomo forms a pseudonymous identifier from the truncated IP address and the user agent. A random value feeds into that identifier and changes every 24 hours, which rules out recognition beyond that period, and across other websites entirely.

The data never leaves our servers, there is no analytics provider and no sharing. Individual records are deleted after six months; only aggregated statistics remain. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in knowing which content gets read. If your browser sends a Do Not Track signal, the visit is not counted at all. Independently of that you can switch measurement off for this browser using the control at the end of this page — Matomo is then not even loaded. For that your browser remembers a single entry, namely this objection, because without it the decision could not be kept. An informal objection by email works as well.

Hosting

The site is hosted by ALL-INKL.COM — Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Deutschland. The provider processes the data described above on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

Your rights

You have the right to information about the data stored about you, to rectification, to erasure, to restriction of processing and to data portability. You may object to processing based on legitimate interests. Contact kai@yesjoar.com. You also have the right to lodge a complaint with a data protection supervisory authority.

For saved lists: we can only identify a list by its identifier. Keep your link if you may want it deleted later — without it we cannot find the list.