Privacy Policy

1. Controller

Sven Hanold Falkenweg 27 89129 Langenau Germany Email: info@hanold.info

2. General information on data processing

This website is predominantly a static information page. No cookies are set and no data is transmitted to advertising networks. All content, including fonts, is served from my own server; no content is loaded from third-party servers. To anonymously count page views, a self-operated, non-personal counting mechanism is used — see section 4 for details. No analysis of user behaviour, no cross-page tracking and no profiling takes place.

3. Hosting

This website is hosted on a virtual server that we rent from STRATO GmbH (Berlin) and operate ourselves; the data centres are located in Germany. STRATO processes data as a processor solely on our behalf; a data processing agreement pursuant to Art. 28 GDPR is in place with STRATO. The data processing agreement is available at strato.de/agb/avv.

When you visit the site, the web server processes the technical information required to deliver it, in particular your IP address. Access is not recorded in log files; this data is only processed for the duration of the connection. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation).

4. Anonymous page-view counter

To see how often individual pages are viewed, this website counts page views. Only the site name, the requested page path, the language version and the date are processed — aggregated into a daily counter per page. In the same way, the site counts how often the App Store link is clicked (with its placement on the page) and how often the support form is submitted successfully — again only as a daily counter, with no link to a person or to the content of a message.

No IP addresses, cookies, device or browser identifiers, or any other personal data are stored. Individual visits cannot be traced back to a person or device afterwards. The counting runs on infrastructure we operate ourselves; no third parties are involved. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in measuring the reach of our own offering).

5. Support form

You can contact us directly through the form on our support page. The data you enter (name, email address, topic, message and, optionally, an attached file — image or text file) is sent from your browser directly to an automation we operate ourselves (n8n). This creates a support ticket in our internal ticketing system and triggers a notification to us.

For short-term abuse detection (rate limiting), your IP address is stored for a maximum of 5 minutes and then automatically overwritten. In addition, the IP address is contained, together with the form data, in the technical logs of the automation, which are used solely for troubleshooting and are automatically deleted after 7 days; it is not analysed.

To protect against automated abuse (spam bots), the form contains an invisible control field and a self-hosted verification mechanism (ALTCHA). While you fill in the form, your browser solves a small computational task that it has previously fetched from our automation; in addition, the time between loading the page and submitting the form is transmitted. For this check, no cookies are set, no third parties are involved and no characteristics of your device or browser are collected; the required script is served from our own server. When the task is fetched, your IP address is processed only for the duration of the connection for technical reasons and is not stored. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in preventing abuse).

After submitting, you will receive an automatic confirmation with a reference number at the email address you entered; in addition, your request is forwarded by email to our support mailbox. To send and store these emails, we use an email service provider that processes the data as a processor solely on our behalf.

An attached file is stored together with your request in our ticketing system and forwarded by email to our support mailbox. It is not transmitted to the AI service named below. Please do not upload files containing passwords, access credentials or other confidential information.

To answer more quickly, we have a draft reply for support requests prepared by the AI service Claude from Anthropic PBC (USA), which we review and edit ourselves before sending. Transmitted for this purpose are the app, the topic and the message text, but not your name, your email address or an attached file. Email addresses within the message text are removed automatically before transmission. Anthropic processes the data as a processor on the basis of a data processing agreement. The transfer to the USA is safeguarded by the EU standard contractual clauses. The data is not used to train AI models. If the service is unavailable, the draft is created on our own infrastructure. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the prompt handling of support requests).

The submitted form data is used exclusively to process your request. It is not passed on to any recipients other than those named here. After the request has been dealt with, the data is deleted unless statutory retention obligations apply. The legal basis is Art. 6 (1) (b) GDPR (processing your request) or Art. 6 (1) (f) GDPR (legitimate interest in preventing abuse).

6. The DockTrace app

DockTrace is a companion for self-hosted Dozzle instances. The app connects to the servers you configure yourself. Your container, log and status data stays between the app and your own server – unless you share logs yourself or use AI analysis with a cloud provider; both are described below. No third-party analytics, tracking or advertising services are embedded, and no crash reports are transmitted to third parties. Credentials and API keys are stored exclusively locally on your device in the iOS Keychain and are not synced with other devices.

Data is transmitted to systems operated by the developer only in the cases described in full below: the anonymous usage statistics, which you can switch off at any time, and the retrieval of public content (news about the app version and app icons). Demo mode works with sample data included in the app and connects to no server.

Anonymous usage statistics

To understand how well setup, trial and purchase work in the app — and to base improvements and pricing decisions on that — DockTrace records a small number of clearly defined events and transmits them, TLS-encrypted, to a server we operate ourselves in Germany (telemetry.hanold.online). These five events are the only ones; there are no others:

First launch of the app after installation
First successful connection to a Dozzle instance
Start of the free trial
Display of the purchase screen
Completed purchase of the Pro unlock

Technically, each event contains exactly the following: a randomly generated installation ID (a UUID rolled on first launch — it contains no device, account or personal reference whatsoever and is deleted along with the app when you uninstall it), a timestamp, the app version, the coarse operating system version (e.g. “iOS 26”), the platform, and in some cases a short context hint (where in the app the purchase screen was shown, or how many days passed between installation and purchase).

What is explicitly not collected and not stored: IP addresses (the receiving endpoint deliberately keeps no access log), device or advertising identifiers (no IDFA, no IDFV), the name or address of your Dozzle instance, your credentials, the names or images of your containers, the contents of your logs, detected incidents, resource metrics of your containers, or any other personal data. The events can neither be linked across devices nor traced back to a person afterwards.

Processing runs entirely on our own infrastructure in Germany (received through a self-operated automation, stored in a self-operated database); no third parties are involved at any point. Evaluation is exclusively aggregated — for example: “How many of a given month’s installations established a connection, and how many of those went on to purchase?”

You can switch the usage statistics off at any time in the app: Settings → Security → the Privacy section, toggle “Anonymous usage statistics”. Transmission then stops immediately. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in improving our own offering). As the data is anonymous, there is no personal reference — we offer the opt-out regardless, because we would expect it ourselves.

Content retrieval

After an update – and when you open “What’s New” in Settings – the app downloads a public file listing the changes in the installed version from our server content.docktrace.app. In the “More apps for self-hosters” section, it loads the icons of our other apps from their websites. No data from the app is sent along; these are ordinary requests for public files. Both servers run on the server we operate at STRATO in Germany, described in section 3. For technical reasons, your IP address is processed only for the duration of the connection; access is not logged. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in informing users about new features and presenting our apps).

You can pass on log lines, a time range or an incident report via the iOS share menu, for example to a messaging app, an AI app or to a file. The app itself sends nothing in the process: you choose the destination, and the transfer is handled by the chosen app or by iOS. The “Mask secrets” option is enabled by default; passwords, tokens, credentials in addresses and email addresses are then replaced with “[REDACTED]” before sharing. Automatic detection cannot find every form of confidential information – please check content before passing it on.

AI analysis (optional)

AI analysis explains an error and suggests next steps. It is voluntary and only runs when you request it.

On device (Apple Intelligence): The analysis runs entirely on your device. No data is transmitted.
With a cloud provider: If you store your own API key for Anthropic, OpenAI, Google or Mistral in Settings and select that provider, the app sends the container name, the image, the error text and up to eight log lines of the incident directly from your device to that provider for the analysis. Passwords, tokens, credentials in addresses and email addresses are automatically masked beforehand. Before the first transmission to a provider, the app explicitly asks for your consent, separately for each provider.

The transfer to the cloud provider takes place exclusively between your device and the provider; the developer receives neither the transmitted content, nor the response, nor your API key. Processing by the provider is governed by your contract with that provider and its privacy policy. Anthropic, OpenAI and Google may process data in the USA. The legal basis for the transfer is your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time by removing the API key or switching to on-device analysis.

Purchases through the App Store

The app is distributed via the Apple App Store. Any purchases or unlocks within the app are processed exclusively through the App Store; the developer does not receive any payment data, only anonymized, aggregated statistics from Apple. Apple’s privacy policy applies in addition.

7. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection (Art. 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority; the competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Germany.

A note on the usage statistics: because the events processed there are anonymous and we cannot attribute them to any person, we cannot apply access, rectification or erasure requests to individual events (Art. 11 GDPR). The most effective means is the opt-out switch in the app.

8. Last updated

September 2026. This policy will be updated as necessary.