Privacy policy

Last updated: November 3, 2026

This policy covers the website cosycoding.com. Our apps — Dishscribe and GreenThumb — have their own privacy policies.

1. Controller

Kai Steffen Reeh (cosycoding)
c/o Online-Impressum 11174
Europaring 90
53757 Sankt Augustin
Germany
Email: privacy@kreeh.de

2. Hosting and server logs

This website runs on a server we operate ourselves, rented from netcup GmbH, Karlsruhe, Germany. When you open a page, the server necessarily processes technical data: your IP address, the date and time, the page requested, and your browser’s user agent. We use this data only to deliver the website and to keep it secure, and we do not combine it with other data. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in operating a secure website).

Fonts and all other files are served from our own server. Opening this website makes no requests to third parties such as Google.

3. Contact form

If you use the contact form, we process your name, your email address and your message in order to answer you. The message is sent by email from our own mail server to our inbox, contact@cosycoding.com. Email to that address is forwarded by our domain registrar, Namecheap, Inc. (USA), to our mailbox; Namecheap is therefore a recipient of the message.

To prevent abuse, the server keeps your IP address in memory for up to one hour to limit how many messages can be sent; it is not written to disk.

Legal basis: Art. 6(1)(b) GDPR where your message concerns a contract or a request before one, otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries). We delete your message once your request is dealt with, unless statutory retention periods require us to keep it.

4. Analytics

We use Umami, an open-source analytics tool that we host ourselves at analytics.cosycoding.com. Umami sets no cookies, stores no IP addresses, and does not track you across websites or build profiles. It counts page views, referrers and the type of device and browser, in aggregate. No data is passed to third parties. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in understanding how the website is used).

5. Cookies

This website sets no cookies.

6. Your rights

You have the right to access your personal data (Art. 15 GDPR), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20), and to object to processing based on Art. 6(1)(f) (Art. 21). To exercise these rights, write to privacy@kreeh.de.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the one responsible for our place of business: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

7. Changes

We update this policy when the website changes. The current version is always available on this page.