DE EN
Read briefing
Legal

Privacy policy

HYPEXIO only collects what the platform needs to run. This page describes which data we process, on what legal basis, and how you can exercise your rights.

Audience measurement (Umami)

For audience measurement we run the self-hosted, open-source tool Umami. The data lives only on our server in Germany and is never shared with third parties.

  • Umami operates entirely without cookies and without localStorage. That is why there is no cookie banner.
  • IP addresses are hashed with a rotating salt before storage; they are never persisted in clear text. Re-identification of individuals is not possible.
  • We respect the Do-Not-Track header (DNT) sent by your browser. If your browser sends DNT, Umami does not register the visit.
  • We only collect aggregated reach signals: pageview, referrer, approximate country (from IP), browser/device type. No user profile is built.

Controller

HYPEXIO is operated as a small, self-hosted project from Hamburg, Germany. Send privacy questions to hypexio.com@gmail.com.

What we process

When you access the site, the server unavoidably processes your IP address, user agent, and the requested URL. These end up in temporary server logs and are deleted after 14 days. Full server logs are not forwarded to a third-party system.

Legal basis

Audience measurement is based on Art. 6 (1) lit. f GDPR (legitimate interest in a stable platform). Because the measurement does not set cookies and does not read information from your device, § 25 (1) TTDSG does not apply; consent is not required (§ 25 (2) Nr. 2 TTDSG — strictly necessary for the service you requested).

Retention

Aggregated Umami pageview data: 12 months rolling. Server logs: 14 days. Newsletter addresses: until unsubscribe. Comments/votes (where active): until account deletion or 24 months after last login.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object (Art. 21). You may also lodge a complaint with a supervisory authority — for example, the Hamburg Commissioner for Data Protection and Freedom of Information.

Contact

For anything privacy-related write to hypexio.com@gmail.com. Response within 14 days is the rule.