Privacy Policy
What happens to your data on this site, which is very close to nothing.
Short version
This site sets no cookies, uses no local storage, runs no analytics and embeds nothing from third parties. There is no contact form and no account. Your browser fetches a few static files from a server, and that server keeps an access log for up to 30 days. The Caps Lock demonstration on the home page runs entirely inside your browser and never records or transmits anything you type. The application itself contains no networking code whatsoever.
The detail below is the same thing said in the form the GDPR asks for.
Controller
The controller responsible for data processing on this website is:
Matti Schulz
Am Rienegraben 8
18519 Sundhagen
Germany
Phone: +49 1517 0509235
Email: hello@matti-schulz.de
Hosting and security
Encryption
This site uses SSL/TLS encryption for security and to protect the transmission of its content. You can recognise an encrypted connection by the address bar switching from "http://" to "https://" and by the padlock symbol in your browser.
Hosting by Vercel
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. The provider is certified under the EU-US Data Privacy Framework, which provides a guarantee of compliance with European data protection law.
When the site is accessed, Vercel automatically records server log files that your browser transmits. These are: browser type and version, operating system used, referrer URL (the page visited previously), host name of the accessing computer, time of the server request, and IP address.
This data is not merged with other data sources. It is collected on the basis of Art. 6 (1) (f) GDPR. I have a legitimate interest in the technically error-free presentation and optimisation of this website, which requires server log files to be recorded.
I have concluded a data processing agreement (Auftragsverarbeitungsvertrag) with Vercel pursuant to Art. 28 GDPR. This ensures that Vercel processes the personal data of visitors to this site only in accordance with my instructions and in compliance with the GDPR.
These server log files are generally stored for a maximum of 30 days and then deleted automatically.
What this site does
No cookies, no tracking
This website sets no cookies, does not use your browser's local storage, and includes no analytics, tracking, advertising or social media services. No consent banner is shown because there is nothing to consent to.
The Caps Lock demonstration
The home page reacts to the Caps Lock key on your keyboard. This works by asking your browser whether the Caps Lock modifier is currently active, using a standard web interface. It happens entirely on your device.
No keystrokes are recorded, stored or transmitted, and no text you type is read. Nothing about this interaction leaves your browser, and no personal data is processed by it.
Downloading the application
The application is served directly from this website. Downloading it produces the same server log entries described above and nothing further. No registration, email address or other information is requested.
The application itself
Capsy runs entirely on your Mac. It contains no networking code: it makes no connections to me or to anyone else, collects no telemetry, reports no usage, and checks for no updates. Its settings are stored locally on your own machine. I receive no data from the application at any point, and could not receive any even if I wanted to.
Contact by email
If you contact me by email, the information you send, including the contact details you provide, is stored by me in order to process your enquiry and in case of follow-up questions. I do not pass this data on without your consent.
Processing is based on Art. 6 (1) (b) GDPR where your enquiry relates to the performance of a contract or to pre-contractual measures. In all other cases, processing is based on my legitimate interest in effectively handling enquiries addressed to me (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) where this has been requested.
The data you send remains with me until you ask me to delete it, withdraw your consent to its storage, or the purpose for storing it no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected.
Your rights
Withdrawing consent
Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. An informal message by email to me is sufficient. The lawfulness of the data processing carried out until the withdrawal remains unaffected.
Right to lodge a complaint
In the event of breaches of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority. The competent supervisory authority for me is:
Landesbeauftragter für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern
https://www.datenschutz-mv.de
Right to data portability
You have the right to have data that I process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done where it is technically feasible.
Access, rectification and erasure
Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and if applicable a right to rectification or erasure of that data. You can contact me at any time about this and about any further questions on the subject of personal data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You can contact me about this at any time. The right to restriction of processing exists in the following cases:
If you dispute the accuracy of your personal data stored by me, I generally need time to verify this. For the duration of that verification you have the right to request restriction of processing.
If the processing of your personal data was or is being carried out unlawfully, you may request restriction of processing instead of erasure.
If I no longer need your personal data but you need it to exercise, defend or assert legal claims, you have the right to request restriction of processing instead of erasure.
If you have lodged an objection under Art. 21 (1) GDPR, a balance must be struck between your interests and mine. As long as it has not been determined whose interests prevail, you have the right to request restriction of processing.
Right to object
Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation.