Privacy policy

Controller

What this site does not do

• No cookies, neither our own nor anyone else's.
• No analytics, no measurement, no tracking.
• No accounts, no sign-up, no email addresses.
• No content from third-party servers. Fonts and scripts are served from here.
• No sharing with third parties and no transfer outside the EU.

Server logs

Access logging is switched off at our host. Your IP address is technically needed to deliver the page to your browser, but it is not written to any log file afterwards.

This means the identifier of a saved list is not recorded anywhere either. It travels in the path of the request when the list is loaded, but nothing logs it. Who can open your list is therefore entirely up to you and whether you pass the link on — note that it does appear in your browser history.

This does not cover what the host has to process briefly at infrastructure level, for instance to fend off attacks. We have no influence over that; see the host's own privacy policy for details.

Storage in your browser

Your books and assumptions are kept in your browser's local storage so they are still there on your next visit. This data never leaves your device and is not visible to us. These are not cookies but storage the function you requested needs directly.

Saved lists (secret link)

When you create a link, your list is stored on the server: title, format, list price, tax rate, royalty rate, printing cost and your assumptions about margin and conversion rate, along with the time of creation and last change.

The list sits behind a random 128-bit identifier. There is no endpoint that lists stored records, and without the identifier a list cannot be found. No name or other personal detail is required — what you type into the title field is up to you.

The legal basis is Art. 6 (1) (b) GDPR: storage happens at your explicit request in order to provide the function. The data stays until you delete it, using the "Delete link" button in the "Your link" dialog. After that the list is irrecoverably gone.

Abuse protection

To stop the store being filled automatically, the number of new lists per caller per hour is limited. For this we do not store the IP address but a hash of the IP address and a random value known only to the server. That hash cannot be reversed and is deleted after one hour. Legal basis: Art. 6 (1) (f) GDPR.

Hosting

The site is hosted by ALL-INKL.COM — Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Deutschland. The provider processes the data described above on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

Your rights

You have the right to information about the data stored about you, to rectification, to erasure, to restriction of processing and to data portability. You may object to processing based on legitimate interests. Contact kai@yesjoar.com. You also have the right to lodge a complaint with a data protection supervisory authority.

For saved lists: we can only identify a list by its identifier. Keep your link if you may want it deleted later — without it we cannot find the list.