Privacy
notice.

1. Controller

Privacy enquiries may be sent by post or email using the contact details above.

2. Nature of the website

ScreenForge is a private, non-commercial website. It provides no advertising, newsletter, public registration or public contact form.

3. Hosting and server logs

The website is hosted by Alfahosting GmbH, Edmund-von-Lippmann-Straße 13–15, 06112 Halle (Saale), Germany. Technically necessary server log data may be processed whenever the website is accessed. This may include the IP address, access time, requested address, transferred data volume, referrer, browser type and operating system.

The processing serves secure and stable delivery, troubleshooting and prevention of abusive access. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure operation of the website. Log data is deleted when it is no longer required for these purposes; retention is governed by the periods agreed with or configured at the hosting provider.

Alfahosting acts as hosting provider and processor. According to its own information, Alfahosting operates its servers in Germany.

4. Project catalogue and downloads

The project catalogue is loaded from a MariaDB database. Merely viewing projects does not create user profiles beyond the technically necessary access data. Downloading a package is logged like any other server request.

5. Language preference

The DE/EN selection is stored only in the browser’s local storage under the key screenforge-language. It is not transmitted to the server and remains until changed or the website data is deleted. The storage is necessary to provide the language function expressly requested by the user.

6. Protected administration area

The administration area is intended solely for the operator. A technically necessary session cookie is set upon login. It is configured as HttpOnly and SameSite=Strict and expires after 30 minutes of inactivity.

To prevent password attacks, the IP address is stored in hashed form using a secret key. Access is temporarily blocked after five failed attempts. The record is deleted immediately after a successful login and otherwise within 24 hours. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is protecting the administration area and hosted files.

7. External links

External content is not embedded automatically. Only after clicking a marked link does the browser connect directly to the respective provider. In particular, the IP address, time, referrer and browser information may be transmitted. Further processing is governed by the privacy notice of the destination service.

8. No analytics or advertising services

ScreenForge uses no web analytics, advertising networks, social media plugins or externally loaded web fonts. A general cookie consent banner is therefore currently not required. These notices and, where necessary, consent controls will be updated if such services are added.

9. Legal bases and retention

Unless stated otherwise, processing for technical delivery and security is based on Article 6(1)(f) GDPR. Data is retained only for as long as required for its purpose or by statutory obligations.

10. Data subject rights

Subject to the statutory requirements, data subjects have rights of access, rectification, erasure, restriction, portability and objection. They also have the right to lodge a complaint with a data protection supervisory authority.

Supervisory authority in North Rhine-Westphalia:

11. Security and updates

The website is intended to be provided exclusively via HTTPS. Technical and organisational measures protect the administration area, database and upload directories. This notice will be updated when functions or processing activities change.

Last updated: 2 August 2026