Deutsche Fassung

Privacy Policy

Last updated: 3 November 2026

This policy explains which personal data is processed when you visit smashq.de, download the Smashq desktop app or let it check for updates; for which purpose; and on which legal basis. This page is a courtesy translation; the German version is the legally binding one.

1. Controller

The controller within the meaning of Art. 4 (7) GDPR is:

Hovsep Aroyan
Wesereschstraße 65
49084 Osnabrück
Germany
Email: support@smashq.de

No data protection officer has been appointed; the statutory conditions that would require one are not met.

2. Overview

The website is a static site. It sets no cookies, uses no analytics or tracking services, embeds no advertising networks and builds no profiles. There is no user account, no contact form and no newsletter. Fonts, scripts, images and stylesheets are served exclusively from our own server; opening the site establishes no connection to third party servers.

The installed app sends no telemetry. It contacts this server only to check for updates.

3. Server log files

On every request to this website your browser transmits technical data that the web server stores in log files. Recorded are:

• IP address of the requesting device
• date and time of the request
• name and path of the requested file
• amount of data transferred and HTTP status code
• referrer URL, if transmitted
• browser type and operating system (user agent)

The purpose of this processing is technical operation: delivering the content, operational security, error analysis and defending against attacks and abuse. The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest is the stable and secure operation of the service. This data is not merged with other data sources and not evaluated for marketing.

Log data is kept on a rolling basis: storage is capped at 30 MB, older entries are continuously displaced by newer ones, and the log is discarded entirely with every new deployment of the website. At the usual request volume this amounts to a retention of a few days to a few weeks. Entries are not kept longer unless needed to investigate a specific security incident.

4. Download counting

To answer how often the application is downloaded, the server keeps a separate record that covers only requests to the /releases/ area. It stores the time, HTTP method, status code, amount of data transferred, a coarse classification of the request as browser, update function of the application or search engine, and the requested address including any parameters it contains. Those parameters include a marker that the website attaches to its own download links. It distinguishes a click on this page from a request made by the update function and contains no information about the person making the request.

The IP address, the referrer URL and the full user agent are not stored. No individual can be identified from this record. It sets no cookies, runs no scripts in the browser and uses no third party analytics service.

Retention: the record of update checks is deleted after 14 days. The record of downloads is kept permanently because it only represents totals per version and contains no personal data.

5. Hosting

The website and the release hosting run on a rented server in a data centre in Germany. The hosting provider processes the data listed above on behalf of the controller under a data processing agreement pursuant to Art. 28 GDPR.

Provider: Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany
Server location: Germany
Privacy policy: hetzner.com/legal/privacy-policy

6. Release downloads and the app's update check

This domain serves the installers of the Smashq desktop app and the update manifest /releases/latest.json. Both a manual download and the installed app's automatic update check are ordinary HTTP requests to this server and therefore produce the same server log entries as a page view: IP address, time and requested file. Legal basis and retention are those of section 3.

Downloads and update checks are anonymous: no registration takes place, the app transmits no usage or telemetry data to this server, and no device or person is linked to the versions downloaded. The update channel is open to every version of the app.

7. Contact by email

If you contact us by email, you transmit your sender address and the content of your message. This data is used solely to handle your enquiry and is deleted once the enquiry is settled and no statutory retention obligation applies. The legal basis is Art. 6 (1) (b) GDPR where the enquiry concerns a contract, otherwise Art. 6 (1) (f) GDPR.

8. Local storage of the display setting

To switch between the light and dark appearance, the website stores the chosen value in your browser's local storage under the key theme. This information stays on your device, is not sent to the server, contains no personal data and serves only the display you requested yourself (Section 25 (2) no. 2 TDDDG). It can be deleted at any time through the browser settings. No cookies are set.

9. Encrypted transport

Visiting this website, downloading releases and checking for updates all run over HTTPS. The connection between browser or app and server is therefore encrypted according to the state of the art and protected against interception by third parties.

10. Your rights

Regarding the personal data processed, you have the following rights:

• access to the data processed (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)

To exercise these rights, a message to support@smashq.de is sufficient. Because server log files are not linked to any user account, a request for access to them usually requires the time of the request and the IP address used.

Independently of this, you have the right to lodge a complaint with a data protection supervisory authority under Art. 77 GDPR. The authority responsible for the controller is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany. You may also complain to the authority of your habitual residence.

11. No automated decision making

No automated decision making, including profiling, within the meaning of Art. 22 GDPR takes place.

12. Changes to this policy

This policy is updated whenever the actual data processing changes, for example through new technical features of the website or the app. The version published here applies; its date is stated at the top of the page.

Provider identification

Full provider details are given in the Imprint.