Last updated: May 2026
Privacy Policy
Controller
Martin Respondek, Kartäuserstr. 16, 55116 Mainz, Germany.
Email: myrotation.run@gmail.com
Our Principles
myrotation.run is a non-commercial, ad-free service. No data is shared with advertisers. No user profiles are created for marketing purposes.
Sign-in via Google OAuth
Creating an account requires signing in with Google. Data stored: name, email address, Google profile ID, profile picture URL. Used exclusively to provide the service, not shared with third parties.
Legal basis: Art. 6(1)(b) GDPR.
Note: Google's Privacy Policy also applies during the OAuth flow.
Public Profiles
Profiles are publicly accessible at myrotation.run/u/yourname. Publicly visible: username, shoes, rotation, Hall of Fame. Email and Google account details are never public.
Accounts can be deleted in profile settings — all data is permanently removed on deletion.
Cookies and Session Data
Only strictly necessary cookies are used (session cookie via NextAuth.js). No tracking, analytics, or advertising cookies. No cookie consent required under current EU and German law.
Server Logs
The hosting provider records IP address (anonymised), date/time, URL, HTTP status, data volume, referrer, and user agent. Used for error analysis and security only, deleted after 30 days.
Legal basis: Art. 6(1)(f) GDPR.
Hosting
Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA. DPA in place. Data transfers to USA based on EU Standard Contractual Clauses.
Your Rights
Under GDPR you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17 — via profile settings), restriction (Art. 18), objection (Art. 21), and complaint to a supervisory authority.
To request a copy of your data, contact myrotation.run@gmail.com — response within 30 days.
Changes
The "last updated" date at the top of this page reflects the most recent revision.