Skip to main content
Kindler Dev

Privacy Policy

This website and my apps are deliberately data-minimal: no tracking, no analytics tools and no advertising. Personal data is processed only where technically necessary to provide a service, or where you actively send me data (e.g. via the contact form).

1. Controller

The controller responsible for data processing on this website (Art. 4 No. 7 GDPR) is:

Björn Kindler
Kindler Dev
Bischofshofener Str. 9
82008 Unterhaching, Germany
Phone: +49 89 62084444
E-mail: info@kindler-dev.de

2. Hosting

This website is hosted with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner. The legal basis is Art. 6 (1)(f) GDPR; my legitimate interest is the secure and reliable provision of this website. More information: hetzner.com/legal/privacy-policy.

Server log files

When you access the website, the hosting provider automatically records information in server log files that your browser transmits: the page/file requested, date and time, the amount of data transferred, the referrer URL, the browser used and its version, the operating system, and the IP address (usually truncated and/or stored only briefly). This data is not merged with other data sources. The legal basis is Art. 6 (1)(f) GDPR (error-free presentation and security of the website). The log files are deleted after a short period.

3. Contact form and e-mail contact

If you send me a message via the contact form or by e-mail, I process the data you provide — name, optionally company, e-mail address, subject and your message — in order to handle your enquiry. When the form is submitted, technical metadata is also stored (timestamp, browser identifier, a truncated/hashed IP address for spam protection). The data is used to handle the enquiry and is kept for a short time in a database on the server mentioned above; it is deleted after 24 months at the latest, or once the purpose no longer applies — unless statutory retention obligations apply.

The legal basis is Art. 6 (1)(b) GDPR where the enquiry relates to a contract, otherwise Art. 6 (1)(f) GDPR (legitimate interest in responding to enquiries). The e-mail infrastructure used for the notification message is operated under a data processing agreement; message content is not shared with uninvolved third parties.

4. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar.

5. Cookies and tracking

This website does not set any cookies for analytics or marketing purposes and does not embed any tracking, advertising or audience-measurement services. A cookie banner is therefore not required.

6. UpscaleKit

UpscaleKit for macOS processes the image files you select entirely on your Mac. Images and image content are not uploaded to me or to a third party. The app does not require an account and contains no analytics, advertising, tracking or telemetry service. It does not collect or transmit personal data.

UpscaleKit includes local AI models. If you explicitly start the download of an optional model in the model catalogue, the app connects directly to the provider named there. The provider then receives the technically necessary connection data, in particular your IP address, and processes it under its own privacy policy. Downloaded models are stored locally in the app's Application Support folder. No connection is made for an optional download unless you start it yourself.

7. Processing of public training data (RetouchKit)

For the development of RetouchKit, my locally-running retouching software, I am training a segmentation model that separates skin, eyes, eyebrows, lips and teeth from one another in portrait photos. For this, I use the publicly available “EasyPortrait” dataset (github.com/hukenovs/easyportrait). The legal basis is Art. 6 (1)(f) GDPR; my legitimate interest is developing a tool that limits retouching precisely to the correct image regions. The images are processed exclusively on my local work machine, are not passed on and are not published. No identification of individuals takes place; the model only outputs image regions. I delete the training data once training is complete, by 31 March 2027 at the latest; a small portion kept for quality checks is retained until 31 December 2027 at the latest. If you are depicted in this dataset, you can object to the processing at any time (Art. 21 GDPR) by e-mail to info@kindler-dev.de. I will then delete the images concerned and train the model in the next run without them. The controller is the one named under section 1.

8. YouTube

I publish videos on my own YouTube channels, for example youtube.com/@KindlerDev. To upload these videos and read information about them, I use YouTube API Services with access limited to my own channels. This integration does not process any data of visitors to this website or of users of my apps.

When you watch or interact with my videos on YouTube, YouTube (Google Ireland Limited) processes your data under its own terms. See the YouTube Terms of Service and the Google Privacy Policy. You can review and revoke access that applications have to a Google account at any time in the Google account permissions.

9. Instagram comments and direct messages (Manychat)

On my Instagram account @kindler.dev you can comment a keyword under some posts to receive a link by direct message. To send that reply automatically I use Manychat, a service of Manychat, Inc. (USA), as my processor. Processed data: your Instagram username and profile ID, the text and time of your comment and of the messages exchanged. Purpose: answering your request (Art. 6 (1)(b) GDPR) and my legitimate interest in answering requests efficiently (Art. 6 (1)(f) GDPR).

Data is transferred to the USA on the basis of the EU-US Data Privacy Framework and, where it does not apply, the EU Standard Contractual Clauses in Manychat's data processing addendum. I delete the contact data stored in Manychat after 90 days at the latest; you can request deletion earlier at any time via the contact details under section 1. Instagram itself is operated by Meta Platforms Ireland Ltd. under its ownprivacy policy.

10. Your rights

You have the right at any time:

  • to information about the data stored about you (Art. 15 GDPR),
  • to rectification of inaccurate data (Art. 16 GDPR),
  • to erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
  • to data portability (Art. 20 GDPR),
  • to object to processing (Art. 21 GDPR) where processing is based on Art. 6 (1)(f) GDPR,
  • to withdraw any consent given, with effect for the future (Art. 7 (3) GDPR),
  • to lodge a complaint with a supervisory authority — the authority responsible for me is the Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach.

To exercise your rights or for any data protection questions, please use the contact details given under section 1.

11. Updates

This privacy policy will be updated if anything changes about the data processing (e.g. new website features). The version published here applies in each case.