Privacy is an important part of HabitHeat.
This website does not use advertising or marketing trackers and does not use analytics cookies. Analytics are operated on self-hosted infrastructure and are designed to minimize the amount of personal data processed.
This privacy policy explains what information is processed when you visit the HabitHeat website or contact us through one of its forms.
1. Data Controller
The controller responsible for data processing on this website is:
Philip Knüppelholtz
Klaus-Groth-Straße 28
23769 Fehmarn
Germany
Email: support@habitheat.com
2. General Information on Data Processing
We process personal data only where this is necessary to operate and secure the website, understand its general usage, respond to messages, or provide features requested by visitors.
Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
3. Hosting
This website is hosted on infrastructure provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server used for this website is located in Germany.
When you access the website, technical information is necessarily transmitted to the server. Depending on the server configuration, this may include:
- IP address
- date and time of the request
- requested URL or file
- HTTP status code
- referrer URL
- browser and user agent information
- operating system information
This information is processed where necessary to deliver the website, maintain technical stability, detect errors, and protect the website and server infrastructure against misuse and attacks.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable, and efficient operation of the website.
4. Domain and DNS Services
The domain and DNS infrastructure for this website is provided by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany.
Technical connection data may be processed by netcup where this is necessary to provide the domain and DNS services.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is the reliable and secure provision of the website.
5. Contact, Feedback and Bug Report Forms
The website provides forms that allow you to contact us, submit feedback, or report bugs.
Depending on the form, the following information may be processed:
- name
- email address
- feedback or report type
- message content
- whether you would like to receive a response
The submitted information is stored in the WordPress installation and is also sent to us by email.
If you indicate that you would like to receive a response, your contact information is used to reply to your request. If you do not request a response, your email address will not be used to contact you regarding the submission.
The processing of submitted information is necessary to review feedback and bug reports, respond to requests where requested, and improve HabitHeat.
Legal basis: Depending on the nature of your request, Article 6(1)(b) GDPR may apply where the communication relates to an existing or prospective contractual relationship. In other cases, processing is based on Article 6(1)(f) GDPR, with our legitimate interest being the effective handling of inquiries, feedback and bug reports and the improvement of HabitHeat.
Form submissions are deleted when they are no longer required for these purposes, generally no later than 12 months after the submission has been fully processed, unless statutory retention obligations or other legitimate reasons require longer storage.
6. Email Delivery
Emails generated through the website, including messages related to contact, feedback and bug report forms, are transmitted using mail infrastructure provided by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany.
For this purpose, information contained in the respective email, including the sender’s email address and message content where applicable, is processed by the mail infrastructure.
Legal basis: Depending on the nature of the communication, Article 6(1)(b) GDPR or Article 6(1)(f) GDPR. Our legitimate interest is the reliable processing and delivery of website-related communications.
7. Koko Analytics
This website uses Koko Analytics, a self-hosted analytics solution integrated into WordPress.
Koko Analytics is configured to operate without analytics cookies. Analytics data remains on our own infrastructure and is not shared with the developer of Koko Analytics for advertising or profiling purposes.
The analytics are used to understand general website usage, such as page views and referring websites, and to improve the website.
No individual user profiles are created for advertising purposes.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is understanding the general usage of our website and improving its content and usability while minimizing the processing of personal data.
8. Lienks Analytics
This website uses Lienks, a self-hosted web analytics system operated by us on infrastructure located in Germany.
Lienks does not use cookies for visitor tracking.
The analytics system processes information such as:
- visited page or URL
- referrer
- date and time
- browser and device information
- operating system
- country
The IP address and user agent may be processed temporarily when a request is received, but they are not stored as such in the analytics database.
Instead, technical information is used together with a regularly rotating salt to derive a pseudonymous visitor identifier. The salt is rotated daily. This is intended to distinguish visits for statistical purposes without permanently storing the visitor’s IP address or user agent.
The resulting analytics data is used exclusively to understand aggregated website usage and improve HabitHeat. It is not used for advertising, cross-site tracking, or the creation of persistent user profiles.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is privacy-friendly statistical analysis and improvement of the website.
9. Plausible Analytics
This website also uses a self-hosted instance of Plausible Analytics operated on infrastructure located in Germany.
Plausible is used without analytics cookies. It is used to collect aggregated statistics about website usage, such as page views, traffic sources, device information and general usage patterns.
The self-hosted analytics data is not provided to Plausible Analytics as a third-party analytics service and is not used for advertising or cross-site tracking.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is privacy-friendly statistical analysis of website usage and the improvement of the website.
10. HabitHeat Embeds
Parts of this website may display HabitHeat content loaded from app.habitheat.com. These embeds are operated by us and are used to demonstrate HabitHeat functionality.
When an embedded element is loaded, your browser establishes a connection to app.habitheat.com. Technical connection information, including your IP address and browser information, is necessarily transmitted as part of the HTTP request.
No third-party advertising or marketing services are loaded through these embeds.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is presenting HabitHeat and its functionality on this website.
11. Local Fonts and External Content
Fonts used by this website are hosted locally. In particular, no connection to Google Fonts servers is established when loading the website.
The website does not embed third-party advertising, social media widgets, externally hosted videos, or similar third-party marketing content.
Links to external websites may be provided. Data is only transmitted to the respective external provider when you follow such a link.
12. Cookies
This website does not use cookies for analytics, advertising, or marketing purposes.
The analytics systems described above are configured to operate without analytics cookies.
13. Data Retention
Personal data is retained only for as long as necessary for the purpose for which it was processed or for as long as statutory retention obligations apply.
Contact, feedback and bug report submissions are generally deleted no later than 12 months after they have been fully processed, unless there is a legal or operational reason requiring longer retention.
Analytics data is retained only for as long as necessary for statistical analysis and the improvement of the website. Where possible, analytics data is stored in aggregated or pseudonymized form.
14. Data Processors
Where service providers process personal data on our behalf, appropriate data processing agreements are concluded where required under Article 28 GDPR.
This particularly concerns infrastructure and communication providers used for hosting and email services.
15. SSL / TLS Encryption
This website uses SSL/TLS encryption to protect data transmitted between your browser and our servers.
You can recognize an encrypted connection by the https:// prefix in your browser.
16. Your Rights
Under the GDPR, you may have the following rights regarding your personal data:
- right of access (Article 15 GDPR)
- right to rectification (Article 16 GDPR)
- right to erasure (Article 17 GDPR)
- right to restriction of processing (Article 18 GDPR)
- right to data portability (Article 20 GDPR)
- right to object to processing (Article 21 GDPR)
Where processing is based on your consent, you also have the right to withdraw that consent at any time with effect for the future.
To exercise your rights, contact us at support@habitheat.com.
17. Right to Object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation in accordance with Article 21 GDPR.
18. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
The supervisory authority responsible for Schleswig-Holstein is:
Independent State Centre for Data Protection Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel
Germany
19. Changes to This Privacy Policy
We may update this privacy policy when the website, the services used, or applicable legal requirements change.
The current version published on this website applies.
Last updated: August 2026