Privacy policy

Controller

OpenBikeControl UG (haftungsbeschränkt), Ulrichstraße 24, 71636 Ludwigsburg, Germany, represented by its managing director Jonas Acker. E-mail: info@openbikecontrol.org. Details in the imprint. We are not required to appoint a data protection officer.

Visiting the site

The site is hosted on Cloudflare's network (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA), which delivers the pages from a data centre near you. To do that, and to protect the site from attacks, Cloudflare processes technical data of each request: your IP address, the page requested, the time, and your browser's user agent. Our own request logs are kept for a few days for troubleshooting and then deleted.

Legal basis: our legitimate interest in delivering a fast and secure website (Art. 6 (1) (f) GDPR). Cloudflare acts as our processor under a data processing agreement. It is certified under the EU-U.S. Data Privacy Framework, so transfers to the USA rely on the European Commission's adequacy decision (Art. 45 GDPR).

No cookies, no tracking

We set no cookies and use no analytics, advertising or tracking tools. Fonts, icons, favicons and screenshots are all served from this site, so loading a page does not contact any other service (the one exception is the spam check on the submit page, below). If you use the light/dark switch, your choice is saved in your browser's local storage so the next page opens the same way; it never leaves your device. Links to app websites, stores and Reddit only lead there when you click them; from then on the privacy policy of that site applies.

Submitting an app or a correction

When you use the submit form, we store:

• what you enter about the app (name, links, description, platforms, price, notes) and whether you are its developer;
• your e-mail address, only if you give one, so we can ask a question about your submission;
• screenshots you attach, and their file names;
• the country your request came from, as reported by Cloudflare (not your IP address), to spot abuse;
• the time of the submission.

We use this only to review your submission and update the directory. Your e-mail address is never published or used for anything else. Legal basis: your request to have an app listed or corrected (Art. 6 (1) (b) GDPR) and our legitimate interest in an accurate directory (Art. 6 (1) (f) GDPR).

Submissions are stored with Cloudflare (Workers KV, and R2 for screenshots) as our processor and are deleted automatically after 180 days at the latest, usually much sooner once reviewed. If we accept a screenshot, we publish it on the app's page with the credit you agreed to; you can ask us to remove it at any time.

Spam protection on the submit form

The submit page, and only that page, uses Cloudflare Turnstile to tell people from bots, instead of a puzzle CAPTCHA. It loads a script from challenges.cloudflare.com, which checks signals from your browser and its connection (such as your IP address and browser characteristics) and returns a token we verify when you send the form. Turnstile doesn't use the data for advertising. To limit abuse, we also count submissions per IP address for one minute. Legal basis: our legitimate interest in keeping the form free of spam (Art. 6 (1) (f) GDPR). Cloudflare is our processor here as well; seeCloudflare's Turnstile privacy addendum.

E-mail

If you e-mail us, we use your address and message only to reply, and delete them when the matter is settled unless the law requires us to keep them (Art. 6 (1) (b) and (f) GDPR).

Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20) and to object to processing based on our legitimate interest (Art. 21). E-mail us to use any of these rights.

You can also complain to a data protection supervisory authority, for example the one responsible for us: the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg,baden-wuerttemberg.datenschutz.de.

Changes

We update this policy when the site changes how it handles data. Last updated: 2 November 2026.