// privacy.policy_

Information about the processing of personal data on this website in accordance with the EU General Data Protection Regulation (GDPR).

1. Controller

The controller within the meaning of Art. 4 (7) GDPR for the processing of personal data on this website is:

Jan-Maurice Dahlmanns
Kattowitzerstraße 2b
41065 Mönchengladbach
Germany
Phone: +49 2161 902 26 31
E-mail: requests@bugfish.eu

2. General Information

This is a purely static, non-commercial website. It does not use cookies, does not use analytics or tracking tools, does not embed third-party content (all fonts, images, scripts and audio files are served locally from this website itself), and does not contain contact forms, comment functions or any other input fields that transmit data to us. The browser tools process your input locally on your device (see section 5).

Personal data is therefore only processed to the technically necessary extent described below.

3. Hosting via GitHub Pages

This website is hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA ("GitHub").

When you visit this website, GitHub automatically processes technical data that your browser transmits, in particular:

This data is processed by GitHub in server log files for the purpose of delivering the website, ensuring its stability and security, and defending against attacks. We ourselves have no access to these log files.

The legal basis for this processing is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the secure and reliable provision of this website.

GitHub may transfer this data to servers in the United States. GitHub, Inc. is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing an adequate level of data protection (Art. 45 GDPR).

Further information can be found in GitHub's privacy documentation: GitHub General Privacy Statement and About GitHub Pages - data collection.

4. No Cookies, No Tracking

This website does not set any cookies and does not use web analytics, advertising networks, social media plugins, or fingerprinting technologies. The optional music player and the interactive terminal on the start page run entirely in your browser; no data is transmitted to us or to third parties when you use them.

Local storage. Nothing is written to your device automatically. Only when you expressly ask for it, a few features keep small entries in your browser's local storage: the terminal's save game (command checkpoint), your favourite tools (star button on the Tools page) and game scores (checkbox "remember on this device"). These entries stay on your device and are never transmitted to us or to anyone else — we cannot access them. Storing and reading them is strictly necessary to provide the function you expressly requested (§ 25 (2) no. 2 TDDDG), so no consent is required. You can delete them at any time: with the "forget all" button on the Tools page, by unticking "remember on this device", or by clearing this website's data in your browser settings.

5. Browser Tools

The tools on the Tools page (e.g. hash and password generators, encoders, converters, image and QR tools, games) run entirely in your browser. Text, files and images you enter or drop into them are processed locally on your device and are not uploaded to us or to third parties. Settings such as the list of recently used tools exist only in memory for the duration of your visit.

5.1 DNS Lookup and Mail DNS Checker — only with your consent

These two tools can only answer DNS questions by asking a public DNS resolver. They therefore show a consent checkbox, which is not pre-ticked. No data is sent before you tick it. Once you have consented and start a lookup, your browser sends the following data directly to the DNS-over-HTTPS resolver you selected:

No cookies, credentials or referrer are sent with these requests. Depending on your selection, the recipient is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (privacy notice for the 1.1.1.1 resolver), and/or Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (privacy notice for Google Public DNS). The providers process this data under their own responsibility to answer your queries; we ourselves receive none of it.

Purpose and legal basis: answering the DNS queries you requested, based on your consent (Art. 6 (1) lit. a GDPR). Giving consent is voluntary; without it, only these two tools cannot be used.

Withdrawal: you can withdraw your consent at any time with effect for the future by unticking the checkbox (Art. 7 (3) GDPR); the lawfulness of the requests made before the withdrawal remains unaffected. Your consent is not stored — it only applies to your current visit of the page and has to be given again after reloading.

Transfer to a third country: the data is transferred to the USA. Cloudflare, Inc. and Google LLC are certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR).

Storage period: we do not store any of this data. How long the providers keep their resolver logs is set out in their privacy notices linked above.

5.2 Images in the Markdown preview

The Markdown preview does not load images from other servers on its own; remote images are shown as placeholders. Only if you click "load remote images", your browser connects to the servers named in your image addresses, which receive your IP address. This happens solely at your own request and for addresses you entered yourself; we have no influence on the processing by those servers.

6. Contact by E-mail

If you contact us by e-mail, the data you provide (your e-mail address, the content of your message and any personal data contained in it) will be processed solely to handle your request. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in answering your enquiry) or, if your enquiry is aimed at concluding a contract, Art. 6 (1) lit. b GDPR. Your data will be deleted once the correspondence is complete, unless statutory retention obligations apply.

7. External Links

This website contains links to external websites (e.g. GitHub, YouTube, Spotify, social networks). This privacy policy applies only to this website. When you follow an external link, the privacy policy of the respective operator applies. No data is transferred to these providers by merely visiting this website - a connection is only established after you actively click a link.

8. Your Rights as Data Subject

Regarding the personal data concerning you, you have the following rights under the GDPR:

To exercise these rights, contact us using the details given in section 1. Exercising these rights is free of charge.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2-4
40213 Düsseldorf, Germany
www.ldi.nrw.de

10. No Automated Decision-Making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place on this website.

11. Data Security

This website is delivered exclusively over an encrypted HTTPS connection provided by GitHub Pages.

12. Changes to this Privacy Policy

We may update this privacy policy to reflect legal or technical changes. The current version is always available on this page.

LAST UPDATED: 2026-09-24