Privacy policy

Data controller

Server access and security

When you visit the website, the server processes technical connection data, especially your IP address, time, requested page and browser details. Server logs and security limits help deliver the site, resolve errors and prevent abuse. The legal basis is GDPR Article 6(1)(f), and Article 6(1)(b) for requested functions. Log retention depends on the hosting configuration.

Accounts and content

On registration and use, we store a username, email address, password hash, verification and session data, and any profile details, links, images and calendar content you provide. This is needed to create and run the account (GDPR Article 6(1)(b)). Published profile details, images and links are visible on the public profile. Opening an external link takes you to a separate site with its own data practices.

Contact and subscriptions

When you contact us, we use the supplied details to respond (GDPR Article 6(1)(b) or (f)). If a client enables a signup form on their profile, we store the submitted email address and consent time for that client’s list. The client’s separate privacy policy is linked at the form, and consent can be withdrawn with that client.

Cookies and local settings

The necessary signal_links_session cookie supports login and security. signal_links_public_language and signal_links_language remember a language you select; treehuba_time_zone remembers the admin time zone. treehuba_consent records your optional analytics choice for 180 days. treehuba_like_visitor is set for one year only after you tap a heart; only a hash of its random value is stored in the database to associate one like per link and browser. These items support requested features and settings (German TDDDG Section 25(2), GDPR Article 6(1)(b) or (f)). We currently set no advertising cookies.

Analytics and live visitors

Only with consent do we record public profile views, link clicks and briefly active visitors for the client’s statistics (GDPR Article 6(1)(a), German TDDDG Section 25(1)). Events include time, profile, event type and, where applicable, link and country. A scheduled task rolls older raw events into daily totals. Without consent, these events are not collected. You can change your choice through “Cookie settings” in the footer at any time; withdrawal applies to future events.

Language and country detection

To choose a language automatically, TreeHuba may send a shortened IP network address to ipwho.is over HTTPS to determine a country; a Cloudflare country header may also be used depending on server configuration. The request uses only the /24 network for IPv4 or /48 for IPv6. You can select a language manually at any time. This processing helps present the site appropriately (GDPR Article 6(1)(f)). If analytics is enabled, the country may also appear in aggregated reports.

Additional services

If a client or administrator enables optional features, uploaded media and text may be processed by a connected local AI worker and scheduled content may be passed through the Make interface to selected platforms. The scope and recipients depend on the individual setup. Opening a social media link or sharing through a platform also subjects you to that platform’s privacy policy; these pages do not load embedded social media feeds.

Retention

Account data and published content remain until the account or individual content is deleted, unless legal obligations require longer retention. Session and security data, technical server logs and aggregated statistics have different retention periods depending on their purpose and server configuration. Consent cookie: 180 days; language preference and like cookie: up to one year each.

Your rights

Subject to GDPR conditions, you can request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. You may withdraw consent at any time for future processing. Contact info@treehuba.com. You may also lodge a complaint with a data protection supervisory authority. We update this policy when processing changes.