Privacy policy

Summary

The Cooking Timer is a small web app without user accounts, cookies, tracking or third-party content, and it does not store anything in your browser. Personal data is only processed in the server log files and when you email me.

1. Controller

David Lammerz, Thadenstraße 22, 22767 Hamburg, Germany, email: hi@darwyn.io

2. Hosting and server log files

At sot-timer.darwyn.io, the Cooking Timer runs on a server operated by netcup GmbH, Emmy-Noether-Str. 10, 76131 Karlsruhe, Germany, in a data centre in Germany. netcup processes the connection data on my behalf (Art. 28 GDPR).

When you open a page, your browser necessarily sends data to the server: IP address, date and time, the requested address, the amount of data transferred, browser and operating system, and the previously visited page (referrer). The server records this in log files so that I can keep the service secure and trace faults or attacks. The legal basis is my legitimate interest in secure operation (Art. 6(1)(f) GDPR). The logs are deleted after 7 days at the latest unless they are needed longer to investigate a specific incident. If the server is attacked, netcup additionally collects its own log files for defence and keeps them for no more than 14 days.

3. Cookies and third-party services

The Cooking Timer does not set cookies or store anything in your browser, and it does not use analytics, advertising or other third-party services. Images, the alarm sound and scripts are all served from this server.

4. Links to other sites

The ByteMonkeys logo links to bytemonkeys.de, the legal notice to Microsoft’s Game Content Usage Rules on xbox.com. These sites have their own privacy policies. No data is sent to them until you click a link.

5. Contact by email

If you email me, I keep your message and address in order to reply (Art. 6(1)(f) GDPR) and delete it once the matter is settled.

6. Your rights

You have the rights under Art. 15 to 21 GDPR: access, rectification, erasure, restriction of processing, data portability and objection. You can also lodge a complaint with a data protection supervisory authority. I cannot link an IP address in the server logs to a person, so for requests about the logs I may need additional information from you to identify you (Art. 11 GDPR). For any questions, use the contact details above.

7. Last updated

October 2026. I update this policy whenever the technology behind the Cooking Timer changes.