Privacy Policy

Effective Date: August 3, 2026

Welcome to infrapage (the "Service"). This Privacy Policy explains how Hauke Jung ("we," "us," or "our") collects, uses, and protects your personal information when you use our website https://infra.page and related services.

We are committed to protecting your privacy and handling your data transparently and responsibly in accordance with the General Data Protection Regulation (GDPR) and other applicable laws in Germany and the European Union.

Table of Contents

  1. Introduction
  2. Information We Collect
  3. How We Use Your Information
  4. How We Share Your Information
  5. Cookies and Tracking Technologies
  6. Data Security
  7. Data Retention
  8. Your Rights and Choices
  9. International Data Transfers
  10. Children's Privacy
  11. Third-Party Links
  12. Changes to This Privacy Policy
  13. Contact Information

Visiting a public page rather than using an account? The Visitor Privacy Notice is the document for you.

1. Introduction

This Privacy Policy describes how Hauke Jung, operating from Hauptstr. 41, 79199 Kirchzarten, Germany, processes your personal information in connection with infrapage, a widget-based infrastructure dashboard.

We are committed to protecting your data and maintaining transparency about our data processing practices.

2. Information We Collect

a. Information You Provide Directly

We collect information you voluntarily provide to us, including:

  • Account registration details (name, email address, authentication data)
  • Communication (messages, support requests, feedback you submit)
  • Billing information (processed through Polar.sh)

b. Information Collected Automatically

When you use our Service, we automatically collect:

  • Device and browser information
  • IP address and general geolocation (region/country)
  • Log data, such as access times and usage patterns

c. Information from Third Parties

We receive limited information from third parties that help us operate the Service:

  • Polar.sh — your subscription and payment status. We never receive or store full payment card details; these are handled entirely by Polar.

  • Integrations you connect — when you connect a service to a widget, it returns only the metrics that widget is configured to read, using an authorization you grant and can revoke at any time. Supported sources currently include GitHub, Stripe, Polar, Google Search Console, Google Analytics, Bing Webmaster Tools, Ahrefs, Vercel, Sentry, Linear, Discord, X, Umami, DataFast, TrustMRR, SeggWat, bunny.net, Beszel, Zitadel, FerrisKey and uptime monitors such as Uptime Kuma.

    Two things worth stating about this. We only ever read the metrics a widget needs — a revenue widget reads totals, not your customer list. And the data behind those metrics stays yours: for it, you are the controller and we process it on your instruction, so if a source holds personal data about your users, your own legal basis governs it.

d. Analytics

We operate our own Umami analytics instance on our own infrastructure. Usage analytics are not shared with a third-party analytics provider.

It is cookieless: a visit is counted via a hash of IP address, user agent and a salt that rotates daily, so nothing is stored on the device and no visitor is recognisable from one day to the next. Legal basis: Article 6(1)(f) GDPR.

It runs on every page we serve, including the public pages you publish — so we measure page views on your dashboard, on infra.page/… and on any domain you connect. That measurement is ours, for understanding how our own product is used; for it we are the controller, under our own legitimate interest, and it is not something you need a legal basis for. What we collect from those visitors, and what we deliberately do not, is set out in the Visitor Privacy Notice — which is written to be linked from your own privacy page if you publish on your own domain.

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service (authentication, dashboard functionality, billing)
  • Improve and optimize the Service and user experience
  • Communicate with you about updates, support, and changes to the Service
  • Prevent fraud and maintain security
  • Comply with legal obligations under EU and German law

4. How We Share Your Information

We do not sell your personal information. We may share it only as follows:

  • Service Providers and Vendors (sub-processors): With the providers listed below, who process data on our behalf under data processing agreements:

    • Contabo GmbH (Germany) — hosting. Our application, PostgreSQL database, session store, and self-hosted authentication all run on infrastructure operated by Contabo, which therefore has infrastructure-level access to stored data.
    • Polar — subscription billing. Receives your email address and account identifier to create checkout sessions and manage subscriptions.
    • Scaleway (France) — transactional email. Receives your email address in order to deliver login codes and service notices.
    • Sentry (Functional Software, Inc., United States) — server-side error and crash reporting. We use Sentry's EU data region, so event data is stored in Europe. An error report may incidentally include your account identifier, the URL being requested, and an IP address.
    • mailbox.org (Heinlein Support GmbH, Germany) — mailbox hosting for our support and contact addresses. Receives the content of email you send us.
    • bunny.net — content delivery for custom domains. Where a page is served on a domain you have connected, bunny.net processes visitor connection data, including IP addresses, in order to deliver it.
    • SeggWat — the in-app feedback button, where it is enabled. Its script is loaded from seggwat.com and processes only what you deliberately submit through it: your message, the page URL and, if you attach one, a screenshot you chose to take. It is operated by the same person as infrapage but runs on its own infrastructure, which is why it is listed here rather than treated as software we run ourselves.

    Software we run ourselves — including our FerrisKey authentication service, our PostgreSQL database, and our Umami analytics instance — is not a separate sub-processor: it operates on the hosting infrastructure named above and under our sole control.

  • Legal Requirements: If required by law or governmental authorities.

  • Business Transfers: In case of a merger, acquisition, or asset sale, your data may be transferred as part of the business.

  • With Your Consent: When you explicitly authorize us to do so.

  • Aggregated/Anonymized Data: Used for analytics or research, without identifying individuals.

5. Cookies and Tracking Technologies

We use cookies and similar technologies sparingly:

  • A session cookie, so you stay signed in after authenticating. Strictly necessary.
  • Two local-storage entries — your light/dark theme preference, and a short-lived holder for a scan you started before signing in. Neither is an identifier.
  • No analytics cookies. Our Umami instance is cookieless: it counts a visit via a hash of IP address, user agent and a daily-rotating salt rather than storing anything on your device.
  • No marketing cookies, advertising pixels, tag managers or session recording. Anywhere.

A public page you have published sets no cookies at all for the people who visit it.

Under § 25 TDDDG — the German implementation of the ePrivacy Directive, formerly TTDSG — information may be stored on or read from your device only where it is strictly necessary for the service you requested, or where you consented. Everything listed above falls in the first category, which is why the service carries no consent banner.

The full breakdown, including what each third-party provider can and cannot set, is in the Cookie Policy.

Managing Cookies

You can control or disable cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

6. Data Security

We take appropriate organizational and technical measures to protect your data, including:

  • HTTPS encryption for all data transmissions
  • Regular security updates and access controls
  • Integration credentials encrypted at rest and never sent to the browser

However, no system is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain personal data only as long as necessary to:

  • Provide our Service and fulfill contractual obligations
  • Comply with legal retention requirements
  • Resolve disputes and enforce our agreements

When data is no longer required, it will be securely deleted or anonymized.

You may request deletion of your data at any time (see Your Rights and Choices).

8. Your Rights and Choices

As a user in the European Union, you have the following rights under the GDPR:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion ("Right to be Forgotten"): Request deletion of your personal data.
  • Restriction of Processing: Ask us to limit the use of your data.
  • Data Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw Consent: Revoke consent at any time, without affecting prior lawful processing.

Do Not Track

Our Service currently does not respond to "Do Not Track" browser signals.

CCPA (California)

If you are a California resident, you may have similar rights under the California Consumer Privacy Act (CCPA). Requests can be made using the contact information below.

9. International Data Transfers

Your account data is stored and processed within the European Union — on hosting in Germany, with transactional email delivered from France.

One exception is worth stating plainly: our content delivery provider, bunny.net, operates edge locations worldwide. If a visitor loads a page served on a connected custom domain, their connection may be handled by an edge location outside the EU. This affects visitor connection data (such as IP addresses) for those page views only; it does not move your account data, dashboards, or integration credentials, which remain on EU infrastructure.

Two of our providers are United States companies. Sentry stores our error reports in its EU data region, and Polar processes billing data in the United States as our payment provider. Access from the United States in either case is covered by Standard Contractual Clauses.

Where data is transferred outside the EU, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) are in place.

10. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, please contact us at info@infra.page so we can delete it.

Our website and documentation may contain links to third-party sites (e.g., GitHub). We are not responsible for the content or privacy practices of these external websites. We encourage you to review their privacy policies before sharing any personal data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any material changes will be notified via email or a prominent notice on our website. Please review this policy periodically to stay informed about how we protect your data.

13. Contact Information

If you have any questions, concerns, or privacy requests, please contact:

Data Controller: Hauke Jung Hauptstr. 41 79199 Kirchzarten, Germany Email: info@infra.page

If you believe your data has been handled improperly, you also have the right to lodge a complaint with your local Data Protection Authority (DPA), such as the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI).

© 2026 Hauke Jung. All rights reserved.