Privacy policy

Last updated: September 2026. The German version is authoritative.

This privacy policy explains how personal data is processed when you visit gystc.dev (the “website”). Personal data is any data that can be related to you personally.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. Legal bases for processing

Where we process personal data, we do so on the basis of Art. 6 GDPR: to perform a contract or take steps prior to entering into one (Art. 6(1)(b)), to comply with a legal obligation (point (c)), on the basis of your consent (point (a)), or to pursue our legitimate interests (point (f)), such as a secure, working website.

3. Your rights as a data subject

With regard to personal data concerning you, you have the following rights against us:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to the contact details above is sufficient.

4. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

5. Hosting

This website is hosted by Vercel Inc. (USA). When you visit the website, Vercel processes technically necessary access data on our behalf (see server log files). We have concluded a data processing agreement with Vercel under Art. 28 GDPR. Where data is transferred to the USA in the process, this is based on appropriate safeguards (in particular the EU Standard Contractual Clauses and the EU-US Data Privacy Framework). The legal basis is our legitimate interest in providing the website securely and efficiently (Art. 6(1)(f) GDPR). More information: vercel.com/legal/privacy-policy.

6. Server log files

When you open the website, information transmitted by your browser is automatically recorded in server log files: in particular IP address, date and time of access, the page or file requested, amount of data transferred, browser type and version, operating system and referrer URL. This data serves the technical provision, security and stability of the website and is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR. Log data is deleted as soon as it is no longer needed for the purpose for which it was collected.

7. Cookies and visit counting (Vercel Web Analytics)

This website sets no cookies and embeds no third-party advertising or tracking services.

For statistical visit counting we use Vercel Web Analytics, a service of Vercel Inc. (USA), which is also our hosting provider (see section 5). Its script is served by this website itself and reports each page view to the same address (gystc.dev/_vercel/insights); no connection to any other domain is made. Vercel Web Analytics works without cookies and without cross-device tracking: no cookies are set and no personal usage profiles are built. For each page view, usage data for aggregated statistics is recorded: the address viewed including certain URL parameters (e.g. ?ref=…), the time, the referrer (the page you came from), the approximate location derived from the IP address (country, region, city), browser and operating system each with version, the device type, and the version of the measuring script. To tell visitors apart, an anonymous hash is derived from technical features of the request (including IP address and browser data); it is not stored permanently but discarded after 24 hours at the latest and does not allow conclusions about your identity; the IP address itself is not stored for visit counting. The legal basis is our legitimate interest in designing and statistically evaluating our website according to demand (Art. 6(1)(f) GDPR). More information: vercel.com/docs/analytics/privacy-policy.

8. Storage in your browser (visit list on the home page)

When you open the home page, it starts a list of the sections you view, each with a timestamp, and, if you type into the demo search field, the first 34 characters of what you typed. The list is a small demonstration of what GYSTC does as memory software: it is shown to you at the end of the page, and on your next visit the page tells you the date and time of your last one. For this it is stored only locally in your browser (localStorage, key gystc.vault.v1); each new visit replaces the list of the previous one. The entry has no expiry date and stays until your next visit or until you delete it. The list is not transmitted to us or to third parties; the demo search field, too, only searches sample data inside your browser. The legal basis for storing it on your device is § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), as it is part of the function offered on the page. You can delete the entry at any time through your browser settings (stored site data for gystc.dev) or, on wide screens, with the “Clear it” button (“Borrar” on the Spanish page) below the list at the right-hand edge.

9. Fonts and media

The typefaces used on this website (“Archivo” and “JetBrains Mono”) and all images, videos and scripts are served locally from our own server. No connection is made to Google or to any other font or content delivery service; in particular, no IP address is transmitted to Google.

10. Links to GitHub

The GYSTC download, the source code, the changelog and the issue tracker are hosted on GitHub, a service of GitHub, Inc. (USA). This content is only linked, not embedded: simply visiting our website transmits no data to GitHub. Only when you follow such a link does GitHub process your data under its own responsibility; GitHub’s privacy statement applies: docs.github.com/site-policy/privacy-policies. The same applies to the link to frindz.ai, which is covered by the privacy policy published there.

11. Contacting us

If you contact us by email, we process the data you provide (e.g. name, email address, content of your message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual/contractual) or point (f) GDPR (legitimate interest in replying). The data is deleted as soon as it is no longer required and no statutory retention obligations apply.

12. SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

13. Changes to this privacy policy

This privacy policy is currently valid (see date above). Further development of the website or changed legal or regulatory requirements may make it necessary to amend this privacy policy.