Privacy policy
This is a translation. The German version is binding.
Controller
Luca Killmaier, Leftbit, Obere Koppenhalde 1, 72406 Bisingen, Germany
Email: ⟨E-Mail-Adresse⟩ (see also the legal notice)
In short
- klemm.app needs no account. The calculation runs entirely in your browser; your input is only in the page address (URL), so you can share the plan as a link.
- Google’s advertising cookies are only used if you agree in the cookie banner. You can change this at any time under “Cookie settings” at the bottom of every page.
- Audience measurement and error reports run on our own server, without cookies and without recognising you.
Hosting and server logs
klemm.app runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in its Nuremberg data centre. Requests may be forwarded through a second Hetzner server in Helsinki, Finland; the data stays in the EU and nothing is stored there. We have a data processing agreement with Hetzner (Art. 28 GDPR).
For every request the server logs: IP address, date and time, request method, the address requested including the parameters in the URL (that is, your input in the calculator), status code, amount of data, response time and browser identifier (user agent). Cookies and the referrer are not logged. This is needed to deliver the site and protect it from attacks (automatic blocking of suspicious IP addresses). The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR). The logs are deleted after 14 days.
Cloudflare
All requests pass through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare sets up the encrypted connection, fends off attacks and forwards the request to our server; for this it processes your IP address and the request data. We do not use Cloudflare’s analytics. The legal basis is our legitimate interest in secure and fast delivery (Art. 6 (1) (f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR); the EU standard contractual clauses in our data processing agreement with Cloudflare apply as well.
Cookie banner and consent
For consent to advertising cookies we use the open-source software c15t, which is served from our own server; no other provider is involved. We store your choice in your browser (cookie and local storage “c15t”, with a random identifier and the time of the choice) for one year, so the banner does not appear on every visit. Nothing is stored before you choose. The legal basis is § 25 (2) no. 2 TDDDG and Art. 6 (1) (c) GDPR (proof of consent).
Consent is voluntary. You can withdraw or change it at any time for the future under “Cookie settings” at the bottom of every page.
Advertising: Google AdSense
We show ads from Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Ads only load after you have made a choice in the banner. We never request personalised ads based on your interests.
- With your consent, Google may use cookies and similar technologies to serve non-personalised ads, limit how often you see the same ad, measure the ads’ performance and detect fraud. The legal basis is your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR).
- Without consent, Google only shows “limited ads”: without cookies or other storage in your browser for advertising purposes. To deliver the ad, Google necessarily receives your IP address and the address of the page. The legal basis is our legitimate interest in funding this free service (Art. 6 (1) (f) GDPR).
Google may transfer data to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). More in Google’s privacy policy: policies.google.com/privacy and policies.google.com/technologies/ads.
Affiliate links (Awin)
The shopping list and the device comparison contain links to online shops; links labelled “Ad” are affiliate links through the partner network of AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany. Nothing is transmitted unless you click such a link: klemm.app loads no scripts, pixels or cookies for it. When you click, Awin redirects you to the shop and stores a click identifier so a purchase can be attributed to our site. Awin and the shop are responsible for this; see their privacy notices. We only receive commission statements without any details about you. The legal basis is our legitimate interest in funding the site (Art. 6 (1) (f) GDPR). Other shop links are plain links without an identifier.
Audience measurement (Umami)
To see which pages and features are used and where the calculator gets stuck, we use the open-source software Umami on our own server (Hetzner, see above); no data goes to third parties. Umami sets no cookies and stores nothing in your browser. It records: the page viewed, referrer, browser, operating system, device type, screen size, language, country, region and city (derived from the IP address) and steps in the calculator (for example the starting circuit and the goal chosen). The IP address itself is not stored. Visits are grouped only within one month, through a checksum of IP address and browser identifier that changes every month; this cannot recognise you over a longer time or across websites. The legal basis is our legitimate interest in a user-friendly site (Art. 6 (1) (f) GDPR).
Error reports (Bugsink)
If an error occurs in the calculator, your browser sends an error report to the open-source software Bugsink on our own server: the error message, the technical trace (stack trace), the page address including the input in the URL, browser, operating system and time. The IP address is not stored and no cookies are set. We use the reports only to find and fix errors and delete them after 90 days at the latest. The legal basis is our legitimate interest in a working site (Art. 6 (1) (f) GDPR).
Contact by email
If you email us, we process your address and message to reply (Art. 6 (1) (b) or (f) GDPR) and delete them once the matter is settled and no retention obligation applies.
Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15–20 GDPR). You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 21 GDPR). You can withdraw consent at any time without affecting the lawfulness of processing before the withdrawal (Art. 7 (3) GDPR). Write to us at the address above.
You can also complain to a data protection supervisory authority, for example the one responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
Last updated: November 2026