Privacy Policy

This policy explains how the JSONPad web, Android, and iOS apps process personal data. It may be updated as the service evolves.

Controller

Colin Schmale, Sülldorfer Mühlenweg 34, 22589 Hamburg, Germany. [email protected]

What we process

No data is sold and no automated decision-making takes place. JSONPad is designed for local execution. The documents you paste, drop, or open are read and processed entirely on your device. They are never sent to any server. We have no accounts, no analytics, no cookies, and no tracking.

CDN / DNS (Cloudflare)

Cloudflare, Inc.; IP and request metadata, processed for delivery and attack mitigation. This applies when you load the web app. Transfers outside the EU are covered by Standard Contractual Clauses. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, performant content delivery and protection against attacks).

User-initiated network requests

If you use the app's feature to open a JSON document from a URL, your device makes a direct request to that address. Your IP and request metadata reach the operator of that target address. We do not route this through a proxy. Legal basis: Art. 6(1)(b) GDPR (fulfilling the requested app functionality).

Contact requests

The data you send us by email, used only to answer you. Emails are stored in Apple iCloud Mail (Apple Distribution International Ltd, IE); we do not have a backend to store them on. US transfers are covered by Apple's EU-US Data Privacy Framework certification and Standard Contractual Clauses. Retained as long as needed. Legal basis: Art. 6(1)(b) GDPR.

Local storage & Permissions

The web app stores your UI language preference in your browser. Mobile apps store this in the system settings. Neither stores document content. The Android app requests internet access (for the URL feature) and reads files you pick through the system file picker. The iOS app works identically through the system document picker.

Your rights

Under Art. 15–21 GDPR you have rights of access, rectification, erasure, restriction, portability, and objection. To exercise a right, email the address above. Because JSONPad does not store your documents or personal usage data, there is generally no data for us to export or delete on your behalf.

Right to object (Art. 21 GDPR)

You may at any time, on grounds relating to your particular situation, object to processing based on Art. 6(1)(f) GDPR (Cloudflare).

Complaints

You may also lodge a complaint with Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI), Ludwig-Erhard-Str. 22, 20459 Hamburg — datenschutz-hamburg.de.