Privacy Policy

This policy applies to the website still.mwsr.de and to the app still. for iPhone and iPad. It is a translation of the German privacy policy; if the two differ, the German version prevails.

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):
Thomas Mengwasser, MWSR
Dechant-Pietz-Straße 7, 48429 Rheine, Germany
Email: hallo@mwsr.de

2. The website

This website is a purely static information page. It sets no cookies, uses no contact forms and embeds no third-party content (such as external fonts, maps or videos). For audience measurement it uses the self-hosted MWSR Analytics (see below).

Hosting and server log files

This website is hosted by: ALL-INKL.COM – Neue Medien Münnich, owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (all-inkl.com).

When you visit the website, the server automatically processes technical information (so-called server log files), e.g. IP address, date and time of access, requested file, browser type and operating system. This data is used to ensure smooth operation and to improve stability and security (legal basis: Art. 6(1)(f) GDPR). The log files are deleted as soon as they are no longer needed for the purpose for which they were collected.

A data processing agreement in accordance with Art. 28 GDPR has been concluded with the hosting provider.

Audience measurement with MWSR Analytics

To understand which pages are used, I use MWSR Analytics, an analytics service I run myself (insights.mwsr.de). When a page loads, a small script reports the visit to this service. It records the page visited, the domain of the referring website, coarse device data (browser, operating system, device type), the country derived from the IP address, campaign parameters in links (UTM), clicks on external links, downloads and technical JavaScript errors.

Measurement is cookie-free and does not store your IP address. To tell visits apart, a pseudonymous value is derived from the IP address and user agent without storing the IP address. Its key changes daily and is then discarded, so you are only recognized within the same day. The data is not shared with third parties and is deleted automatically after 400 days.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in analyzing and improving this website). You can object to the processing, for example by blocking the script with a browser add-on or by writing to me.

3. The app still.

still. does not collect any personal data. I do not run any servers for the app; there is no user account, no advertising, no analytics or tracking tools and no third-party libraries. I never receive anything you write, record or store in the app.

Storage on your device

Names, photos, messages, voice recordings and videos are stored exclusively on your device and encrypted there with AES-256. The key is kept in your device's Keychain. The data is excluded from device backups. If you delete the app, the data is removed irrevocably.

Permissions

The microphone is used only for voice messages and is requested only when you record for the first time. You choose photos and videos with the iOS photo picker; the app only receives the selected media and has no access to your photo library. Face ID or Touch ID is checked by iOS itself; the app receives no biometric data. All media stay on your device.

Optional iCloud sync

Syncing via iCloud is turned off by default. If you turn it on, your data is encrypted on your device before upload and stored in your private iCloud database. The key is kept in your end-to-end encrypted iCloud Keychain; neither Apple nor I can read the content. I have no access to your iCloud data. Apple's privacy policy applies to iCloud (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland). The legal basis is your decision to use the feature (Art. 6(1)(a) and (b) GDPR). You can remove the data from iCloud at any time with "Delete iCloud Data" in the settings.

App Store

Download, updates and the purchase of the full version (in-app purchase) are handled by Apple's App Store. Apple processes data there under its own responsibility. If you have agreed in iOS to share analytics with app developers, Apple provides me with anonymized crash reports and usage statistics that do not allow any conclusions about you or your content.

4. Contact by email

If you contact me by email, your details (email address, content of the message) are stored to handle your request and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR (initiation or performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in answering). The data is deleted as soon as it is no longer needed for this purpose and no statutory retention obligations apply.

5. Your rights

You have the following rights with respect to the controller:

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority in your country of residence.

6. Last updated

This privacy policy was last updated in October 2026. It will be adapted when the website, the app or the legal situation changes.