Privacy Policy
Privacy by Design
This application was designed with privacy at its core. Unlike most web services, your personal relationship data stays completely private.
100% Local Processing
All menu data is processed and stored entirely within your browser using local storage. Nothing about your relationship preferences is ever transmitted to any servers without your explicit consent and initiation.
No Tracking Cookies
No cookies are used to track your behavior or preferences. Your browsing remains private to you.
Sharing Your Menu with Others
There are three ways to share your relationship menu with others, both designed with your privacy in mind:
Share as Link
Share a copy of your menu via an end-to-end encrypted link. Your menu is encrypted on your device and only the encrypted data is uploaded to the server without the encryption key.
Exporting as PDF
Export your menu as a beautifully formatted PDF document that's ready for printing or sharing. The exported PDF file can be opened on any device with a PDF viewer and be edited on this website.
Downloading as JSON File
Download your menu as a JSON file. If you don't know what that means this likely isn't for you. Can be used to put the menu into a git repository or other version control system.
Privacy Benefits of All Sharing Methods
- Your personal data remains on your device until you explicitly choose to share it
- You maintain absolute control over who can access your relationship preferences
Link Advantages
- Protected with end-to-end encryption
- Valid for 5 days / 5 minutes after it is used
- Easy to share via messaging apps
PDF Advantages
- Professional presentation
- Ready for printing
- Widely compatible format
- Contains json menu data
- Editable on this website
JSON File Advantages
- Permanent offline storage
- Easy backup and archiving
- Version control possibilities
Legal Requirements
1. General information and mandatory information
Data Controller Information
Address
Paul-Vincent Roll
Gürtelstraße 13
13088 Berlin
Germany
Contact
+49 173 1626294
paul-vincent@relationshipmenu.org
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).
2. Data collection on this website
2.1. Sharing Your Menu via Link
When you share a menu via a link, an encrypted copy of your menu is uploaded to the app's server.
Encryption happens locally on your device using AES-256-GCM. A new encryption key is generated each time you create a sharing link.
Only the encrypted data is uploaded and the decryption key is never sent to the server. Instead, it's embedded in the link as a URL fragment after the # symbol, ensuring that even I cannot decrypt your menu.
Shared links remain valid for up to 5 days and expire automatically 5 minutes after the menu data is requested and the menu is imported in the app or on the website. After expiration, the data is deleted from the server. To enable this, the server stores a timestamp of when the menu was uploaded.
Menus are only uploaded when you explicitly choose to share them. No menus are transmitted to the server without your direct action.
Menu data is stored and processed based on your consent under Art. 6(1)(a) and Art. 9(2)(a) of the GDPR.
You may request deletion of an uploaded menu by emailing me the menu ID from the link. Please be sure to remove the decryption key before sending.
2.2. Server log files
When you access the website, certain technical data is automatically collected and stored in server log files. This helps ensure the security, stability, and proper functioning of the service.
These log files include:
- IP address of the device making the request
- Host name of the requesting device
- Timestamp and duration of the request
- Request line indicating the requested resource
- HTTP status code returned by the server
- Amount of data transmitted during the request
- User agent string (including browser type and version, operating system)
- Referrer URL (the webpage that linked to the resource)
This data may also be used to detect and prevent malicious activity, such as abuse or unauthorized access attempts, including implementing rate limiting on IP addresses to protect the service from overload or attacks.
The processing of this data is based on Article 6(1)(f) GDPR (legitimate interests), aimed at ensuring service security, stability, and abuse prevention.
Log files are retained for a maximum of fourteen (14) days and are not linked with any other personal data.
3. Data Processing by Third-Party Providers
phasedrei
This website uses phasedrei, Richard-Wagner-Ring 2E, 67227 Frankenthal (Pfalz) as the hosting provider.
The collected data mentioned in Section 2 is processed and stored on servers operated by phasedrei.
A data processing agreement is in place with phasedrei, ensuring full compliance with the strict requirements of German data protection authorities.
The privacy policy of phasedrei can be found at: https://phasedrei.de/datenschutz/
The use of phasedrei is based on a legitimate interest (Art. 6 (1)(f) GDPR) in ensuring the secure and reliable hosting of this service.