Privacy policy

This is a courtesy translation. Only the German Datenschutzerklärung is legally binding.

This policy covers the website knutt.thesailing.dev and the public demo at demo.knutt.thesailing.dev.

Controller

HandWerkZeug
Till Wesselmann
Angelburger Straße 66e
24937 Flensburg
Germany
Email: knutt@thesailing.dev

Hosting

The website and the demo run on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is in Hetzner’s data centre in Falkenstein, Germany. Hetzner processes the data this involves on our behalf (Art. 28 GDPR).

Hetzner backs the server up daily and deletes each backup after seven days. Anything we delete on the server can therefore remain in a backup for up to seven more days.

The website knutt.thesailing.dev

The website sets no cookies and stores nothing in your browser. It contains no analytics or tracking tools and loads nothing from other servers; the fonts are on our server too.

When you open a page, your browser sends the server the data it technically needs: your IP address, the address requested, the time and details such as browser type and language. The server needs them to deliver the page to you.

The server keeps no access log. It writes operational messages to its system log, for example on start-up and about certificates. Only if a technical error occurs while delivering a page can such a message contain the request with your IP address. The system log is deleted after one month.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is delivering the website and fixing errors.

Contact by email

If you email us, we process your email address, your name if you give it, and the content of your message. We use this data only to answer your enquiry.

If your enquiry concerns or prepares a contract with us, the legal basis is Art. 6(1)(b) GDPR. Otherwise it is Art. 6(1)(f) GDPR, and our legitimate interest is answering enquiries.

We delete your messages once your enquiry has been dealt with. Messages we must keep under tax or commercial law, for example about a contract, we delete when the statutory period ends.

The demo at demo.knutt.thesailing.dev

The demo is a public installation of knutt with made-up sample data. You sign in without a password as one of the sample people. All visitors share these accounts.

Everything you enter or upload in the demo is visible to all other visitors. So do not enter real personal data, neither your own nor anyone else’s, and do not upload real documents. The demo sends no email.

Every night at 4 am (German time) we reset the demo. We delete the two sample ships with everything that belongs to them (tasks, certificates, documents, change history and the people who belong only to these ships) and create them anew. Anything that belongs to neither ship, such as a newly created ship with its entries, is left in place. If you have created something like that and want it deleted, write to us.

The demo loads nothing from other servers; the maps are on our server too.

Demo logs

The demo’s server logs every request: your IP address, the time, the address requested, the status code, the amount of data transferred, the duration and the request headers, such as browser type, language and the page you came from. Cookies are not logged. The application also logs when someone signs in as which sample person, and refused requests with their IP address.

We use the logs to find errors and to fend off misuse. They are deleted after one month.

To limit misuse, the demo also counts requests per IP address or per session in a cache. These counters expire after one hour at most.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is running the demo securely and reliably.

Demo cookies

The demo sets only the cookies it needs to work. None is used for analytics or advertising.

• sessionid keeps you signed in. Until you sign out, one year at most.
• csrftoken protects forms against forged requests from other websites. One year.
• messages shows a notice after an action. Deleted as soon as the notice has appeared.
• knutt-me and knutt-id keep the copy of your account data in the browser up to date and detect a switch to another sample person, so that the previous person’s data is deleted. Up to one year.
• django_language remembers the language if you choose one in the settings. Until you close the browser.
• sidebarCollapsed and helpPanelOpen remember whether you collapsed the sidebar or opened the help. Only if you do so, for one year.

The session that sessionid belongs to is stored in the demo’s database and, for fast access, in its cache. It holds which sample person you are signed in as, and settings such as the selected ship. It is deleted when you sign out. Otherwise it expires after one year and is deleted in the following month.

Browser storage

The demo also stores data in your browser’s storage (local storage and a service worker’s cache): interface settings such as columns and filters, recently opened entries, a copy of your account and permission data for fast page loads, and documents you have opened. If you download data for offline use in the settings, the browser also stores pages, data, documents and maps.

This data stays on your device; we do not receive it. When you sign out, knutt deletes the stored pages, data and documents. You remove everything by deleting the site data of demo.knutt.thesailing.dev in your browser.

The legal basis for cookies and browser storage is § 25(2) no. 2 TDDDG: they are strictly necessary for us to provide the demo you asked for. We base the processing of the data on Art. 6(1)(f) GDPR; our legitimate interest is running the demo.

Recipients

Hetzner runs the server for us (see Hosting). Emails are held by the provider that runs our mailbox. Otherwise we pass on no data unless the law obliges us to.

Obligation to provide data

You do not have to give us any data. Without the data that is technically needed, however, the server cannot deliver the pages to you. We make no automated decisions about you and create no profiles.

Your rights

You have the right of access to your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). To exercise them, write to knutt@thesailing.dev.

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you can object to this at any time on grounds relating to your particular situation (Art. 21 GDPR). We then stop processing the data, unless we have compelling legitimate grounds that override your interests, or we need the data to establish, exercise or defend legal claims.

Complaints

You can complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel
Germany

Last updated: November 2026