Legal

Privacy Policy

This notice describes what data is processed when you visit this site. Last updated: September 2026.

Controller

Hosting & server logs

The site runs on a server in Germany (Hetzner). When you access it, technically necessary access data is processed (requested page, time, browser type and IP address) to keep the service running and secure. The legal basis is Art. 6 (1)(f) GDPR. This data is not used for profiling.

No tracking cookies · settings & plans

We use no advertising or tracking cookies. Your settings (language, light/dark) are stored only locally in your browser (localStorage). Your plans are stored locally in your browser and additionally on our server (Hetzner, Germany) under a random, anonymous identifier (UUID) in the address bar (URL), so you can open them on other devices and share them by link. This happens without an account and without sign-in; we collect no personal data and cannot associate stored plans with any person. Only someone who has the link can open the corresponding plan. The legal basis is Art. 6 (1)(f) GDPR. Stored plans are kept until you ask us to delete them; send the plan's link to info@carcassist.com. Exported files (CSV, JSON, STEP, DXF, PDF) stay with you.

Analytics (GoatCounter)

For reach measurement we use the self-hosted, privacy-friendly tool GoatCounter (stats.carcassist.com). It records page views, referrer, coarse origin (country) and browser anonymously. No cookies are set and no personal data is stored permanently. The legal basis is Art. 6 (1)(f) GDPR.

In addition, the planner counts anonymously that a project was calculated after you change a plan: as a counter on our server and as an event in GoatCounter. No plan content is transmitted. The legal basis is also Art. 6 (1)(f) GDPR.

Fonts (self-hosted)

All fonts are self-hosted and served directly from our own server. No connection is made to Google servers (Google Fonts); no IP address is transmitted to Google.

Support (Ko-fi)

The planner embeds a "Support" widget from Ko-fi (storage.ko-fi.com / ko-fi.com). Loading it establishes a connection to Ko-fi, which receives your IP address. The legal basis is Art. 6 (1)(f) GDPR (interest in making voluntary support possible). If you use the widget, Ko-fi's privacy terms apply.

Error reports

If you use the "Report a bug" function, the title and description and – only if you tick "Attach my current design" – your current plan are submitted as an entry (issue) to our code repository at GitHub (GitHub Inc., USA) so we can fix the problem. This repository is public: the report and any attached plan are visible to anyone on GitHub. Please do not include personal data. The legal basis is Art. 6 (1)(a) GDPR (your consent by submitting). You can ask for a report to be deleted at any time at info@carcassist.com.

Voice input (only when you switch it on)

In “Find parts” you can say the sizes. The microphone is active only while you have it switched on. Your browser does the speech recognition: Chrome and Edge send the audio to their maker’s speech service (Google or Microsoft), Safari to Apple. Carcassist itself neither receives nor stores sound or text.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a data protection authority. To exercise these, contact info@carcassist.com.