Privacy Policy

1. Controller

Elias Schlappner

Tiepolostr. 4
97070 Würzburg

Email: kontakt@elias-schlappner.de

2. In short

This website sets no cookies, uses no tracking or analytics tools and loads no content from third-party servers, not even fonts. Only when you send the contact form do your details go to my own server (section 4).

The Islary app has no telemetry, no user account and no servers of its own. Your content stays on your Mac. The app only goes online for the features listed below.

There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.

3. Visiting the website

The website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit it, the provider processes technically necessary data: IP address, time, requested address, browser identifier and amount of data transferred. Without this data the page cannot be delivered.

The purpose is to deliver the site securely and reliably and to protect it from attacks. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is a reachable, secure website.

The provider acts as my processor under Art. 28 GDPR, based on its Data Processing Addendum. Data may reach the USA. The provider is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). The European Commission's standard contractual clauses also apply.

According to the provider, these logs are kept only for a limited period; it does not state a fixed period. I do not analyse or store any logs myself.

4. Contact form

When you send the contact form, your name, email address and message go to my own server at api.elias-schlappner.de. There I store the request, marked “Islary”, in a database and receive a notification by email. The legal basis is Art. 6(1)(b) GDPR where your request concerns a purchase or your license, otherwise Art. 6(1)(f) GDPR. My legitimate interest is answering your request.

Together with the request I store your IP address and your browser's identifier (user agent). This serves only to prevent abuse, such as automatically sent spam. For the same purpose the server limits the number of requests per IP address and keeps it in memory for up to one hour. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is operating the form securely. The form sets no cookies.

The server is located in the EU with Hostinger International Ltd. (Frankfurt am Main). Notifications are sent by Strato AG. Both act as my processors under Art. 28 GDPR.

I delete the request, including IP address and browser identifier, no later than 12 months after it has been resolved, unless a statutory retention obligation applies. On request I delete it sooner. Providing the details is voluntary. Without them I cannot reply via the form. You can write to me at kontakt@elias-schlappner.de instead.

5. Purchase

“Buy” takes you to the checkout of Polar Software, Inc., 3500 South DuPont Highway, Dover, DE 19901, USA. Polar processes your name, email address, payment and billing data as an independent controller. Polar's privacy policy applies (polar.sh/legal/privacy). According to Polar, data is also transferred to the USA based on the European Commission's standard contractual clauses.

Polar passes on to me what I need for license and support: name, email address, country, order and license key. The legal basis is Art. 6(1)(b) GDPR (license agreement). Without this data I cannot provide your license.

I keep purchase records as required by tax law, accounting vouchers for 8 years from the end of the calendar year (§ 147 AO, German Fiscal Code). The legal basis is Art. 6(1)(c) GDPR. I delete support emails once the request is resolved and they have no tax relevance, at the latest 12 months after it is resolved.

6. The Islary app

Islary stores settings, notes, shelf, clipboard and all other content only locally on your Mac. I receive none of it. Access to calendars, reminders, location services or accessibility only happens after you allow it in macOS.

License: When you activate, when you sign out and at most every 7 days for validation, the app sends the license key, the Islary organization ID and the activation ID to Polar (api.polar.sh). On activation it also sends the device type, for example “MacBook Pro”, but no device name. Polar technically sees your IP address. The legal basis is Art. 6(1)(b) GDPR. Without this check the license cannot be activated.

Weather: For the forecast the app queries Apple's weather service (WeatherKit) with the coordinates of your location. It determines the automatic location only through macOS location services and only after you allow it. If you search for a place, the search term goes to Apple Maps. The recipient is Apple, for the EEA Apple Distribution International Limited, Ireland. Apple states that it uses location data only for the forecast and does not link it to you. The legal basis is Art. 6(1)(b) GDPR, because you turn the feature on yourself. You can revoke location access in System Settings at any time. Without a location the app shows no weather.

Music: With some music apps, Islary loads the cover of the current track from the address the music app itself provides. The server behind that address sees your IP address. The music app determines which server that is.

“Ask Claude”: This feature uses the claude CLI that you installed and signed in to yourself. Your question and attached content go through the CLI to Anthropic under your own account (for the EEA Anthropic Ireland, Limited, Dublin). Anthropic's terms and privacy policy apply (anthropic.com/legal/privacy). I am not responsible for this and receive nothing.

Islary does not send crash reports or usage statistics.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR). You can withdraw consent at any time with effect for the future. Write to kontakt@elias-schlappner.de.

Right to object: Where I process data based on Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example where you live or with the authority responsible for me: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.