Privacy & Data

Use these facts when writing privacy policies, terms, or answering data questions.

Hosting

• Servers are hosted in Germany
• Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany; HRB 6089 Ansbach; VAT DE812871812)
• Hetzner data centers: Nuremberg, Falkenstein, or Helsinki (all EU)
• Hetzner is German-owned, no US parent

Infrastructure

• Database: PostgreSQL
• Asset storage: Hetzner Object Storage (S3-compatible)

Analytics

• Privacy-first, server-side only
• No cookies, no JavaScript trackers, no fingerprinting
• Visitor hash: SHA256(IP + UA + date)
• Geo location: MaxMind GeoLite2 (self-hosted database)
• Raw data retained: 90 days
• Aggregated daily stats kept longer

Forms

• Submission data stored as JSONB in PostgreSQL
• Email notifications sent to site owner via SMTP
• Site owner is data controller; PageWeave is processor

Cookies

• None on public sites
• No session, analytics, or tracking cookies on *.pageweave.site

Third-Party Services

• Google Fonts: proxied through PageWeave (not loaded from Google)
• Cloudflare: DNS only (not proxied, not a CDN)

SSL/TLS

• All traffic encrypted via HTTPS
• On-demand TLS for custom domains

Data Retention

• Page view logs: 90 days
• Form submissions: until deleted by site owner
• Asset versions: until deleted