Privacy Policy

The controller responsible for data processing is Evomation (see legal notice for details). See our Impressum for company information: Impressum

• Email: info@evomation.de
• Phone: +49 (0) 5222 187 68 20

• Service operation and account management (Art. 6(1)(b) GDPR – contract).
• Security, availability and abuse prevention (Art. 6(1)(f) GDPR – legitimate interests).
• Optional error reporting (Sentry) to improve stability (Art. 6(1)(a) GDPR – consent).

• Account data: email and minimal profile information you provide.
• Technical data: device, browser, and log metadata generated during usage.
• Processing metadata: we do not store your files; we store only file metadata (e.g., name, type/extension, size, processing timestamps) for traceability.

• Vercel (EU region fra1): application hosting, CDN delivery, and logging within the EU.
• Kinde (EU region): OIDC authentication, session management, and user provisioning.
• Neon (AWS eu-central-1 / Frankfurt) via Prisma: managed Postgres hosting for application data.
• Sentry (EU-hosted instance): optional error telemetry and masked replays; enabled only with your consent.

• NEXT_LOCALE: Stores your selected language for localized routes and content.
• sidebar_state: Stores whether the sidebar is collapsed or expanded (set until end of day).
• evk-app-theme (cookie): Stores your selected app/public theme (up to 12 months).
• localStorage: evk-app-theme: Stores your selected theme locally to prevent flicker and preserve preference across visits.
• evk-sentry-consent: Optional: stores your error-reporting consent (cookie until end of day plus sessionStorage cache for the active session).
• evk-sentry-replay-consent: Optional: stores your session-replay consent (cookie until end of day plus sessionStorage cache for the active session).
• Kinde session cookies: HttpOnly secure cookies required for authentication and session security.

• Access to your personal data (Art. 15 GDPR).
• Rectification of inaccurate data (Art. 16 GDPR).
• Erasure (‘right to be forgotten’, Art. 17 GDPR).
• Restriction of processing (Art. 18 GDPR).
• Data portability (Art. 20 GDPR).
• Objection to processing (Art. 21 GDPR).
• Right to lodge a complaint with a supervisory authority.