Website Hosting
This website is hosted on GitHub Pages. The provider is GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA, respectively GitHub Ireland Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland.
Visiting this website transmits technical data to GitHub, in particular your IP address, browser type, operating system, referrer URL, date and time of access, and the files requested. This data is stored in server log files and used to provide, secure, and stabilize the website. See GitHub's Privacy Statement for details.
DNS and Cloudflare
This domain's nameservers are fully delegated to Cloudflare. As part of DNS resolution, Cloudflare processes personal data, in particular IP addresses and DNS queries, technically required to resolve the domain and make the website reachable. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA and Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany.
Transfers to the US rely on the EU-US Data Privacy Framework and supplementary Standard Contractual Clauses. See Cloudflare's Privacy Policy for details.
No Cookies, No Tracking
This website itself sets no cookies and includes no analytics, advertising, or third-party tracking scripts of its own. Technically necessary processing to deliver the page, such as DNS resolution or server logs, is excluded and described above.
The App Itself
XDragMover does not collect, transmit, or store any personal data. Its only network activity is an optional, off-by-default update check that queries this project's public GitHub release repository — see the app's own README for details.
Support via PayPal
The homepage's "Support via PayPal" button links to paypal.me/ralf1234, which takes you to a page operated entirely by PayPal, away from this website. I never receive any data about that visit — I don't even know whether you clicked it. Anything you enter there, including to make a payment, is processed solely by PayPal under its own privacy policy; see PayPal's Privacy Statement for details.
Legal Basis and Retention
Processing technical data to provide the website relies on Art. 6(1)(f) GDPR (legitimate interest: operating, securing, and stabilizing the website). Any data you actively submitted would be processed under Art. 6(1)(a) GDPR (consent) or (b) (pre-contractual measures), depending on the purpose.
Log data is generally kept only briefly. GitHub and Cloudflare may retain certain logs for varying periods; operational and security logs are typically deleted within hours to days. Exact periods are governed by each provider's own privacy policy.
Your Rights
You have the right to access, rectification, erasure, restriction of processing, objection, and data portability. To exercise your rights or for privacy questions, please contact me via the email address listed in the Imprint.
Contact and Controller
The controller responsible for data processing under the GDPR is the person or entity named in the Imprint. Please refer to the Imprint for contact details.
Additional Notes for International Visitors
The sections above already describe, in full, what data is processed — solely the technical access data from GitHub Pages and Cloudflare, no cookies, no tracking, and no sale or sharing of data. The following puts that in context for visitors from specific jurisdictions.
European Union (GDPR). For EU visitors, the GDPR described above already applies in full — purpose, legal basis, retention, and your rights are covered in the "Legal Basis and Retention" and "Your Rights" sections above.
California (CCPA/CPRA). This website does not sell or "share" (as defined by the CCPA/CPRA) any personal information, and builds no user profiles. A "Do Not Sell or Share My Personal Information" link is therefore unnecessary, since there is nothing to sell or share. California visitors still have the right to know, delete, and non-discrimination; please direct requests to the contact address in the Imprint.
Brazil (LGPD). Since this website collects or processes no personal data beyond what's technically necessary to serve it, no separate Data Protection Officer has been appointed under the LGPD. The controller under the LGPD is the person named in the Imprint; data subjects in Brazil can exercise their rights via the contact address listed there.
China (PIPL). This website does not specifically target visitors in China and exports no personal data from China. Should it still be accessed from China, processing is limited to the technical access data described above, handled by GitHub Pages and Cloudflare; a separate cross-border transfer notice under the PIPL isn't required in the absence of active data collection.
India (DPDP). This website collects no consent to personal data and therefore needs no separate, multilingual notice under India's Digital Personal Data Protection Act. The technical access data described above is the only processing that also occurs on access from India.