Imprint & privacy

Legal notice

Information pursuant to § 5 DDG (German Digital Services Act)

Contact

Responsible for content pursuant to § 18 (2) MStV

Privacy

Boop is a little stamp calendar. Here you'll find, in plain words, which data comes up along the way, what I need it for, how long I keep it and what you can do.

Controller

The controller responsible for processing your data is:

You can reach me through the contact form in the legal notice above. Your name, email address and message reach me by email – sent through Resend (see “Emails via Resend”); nothing of it is stored on the site. I use the details only to answer you and delete the mail once the matter is settled (Art. 6 (1) (b) and (f) GDPR). Against abuse the server holds your IP address in memory as it does so, for at most ten minutes after your last message (see “Hosting and server logs”).

Hosting and server logs

Boop runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, under a data processing agreement. The database with everything stored in Boop is there too.

With every request the server processes technically necessary data – IP address, date and time, requested address, browser type and operating system – in server logs, to deliver the site and protect it from attacks. Legal basis: Art. 6 (1) (f) GDPR; my legitimate interest is a secure, working service.

To slow down abuse – too many sign-ups, messages or counting signals from one address – the server also holds IP addresses in memory: for the statistics at most one minute, for the contact form at most ten minutes and for signing up at most one hour after the last request from that address. Then it forgets them by itself; they are never written to disk. Legal basis, here too: Art. 6 (1) (f) GDPR.

While the app is open, it keeps a connection to the server open, through which it learns when something has changed in your calendars – so it is up to date right away. No extra data is stored for this.

Your account

To use Boop, you create an account. For it I store your email address, your display name and your language – the one you last used Boop in; the emails come in it. I never store your password in plain text, only as a salted hash – it cannot be recovered from that, not even by me. Added to that are the technical details logging in needs: whether your email address is confirmed, when the account was created and last changed, an entry for every login on a device with its start and its end (nothing about the device), against guessing passwords the number of recent failed tries – after too many, logging in is locked for a quarter of an hour – and, for the deletion periods below, when you last used Boop (noted once a day at most, when you log in and when the app syncs with the server) and, if it came to that, when I reminded you by email that the account would be deleted.

After signing up you get an email with a link to confirm your address; if you don't confirm it within 30 days, I delete the sign-up again. If you forget your password, you can have an email sent to you with a link to reset it; it is valid for one hour. I don't send newsletters or advertising.

You can change your email address in the app under “Account”, with your password. The new address is then only noted at first – with a confirmation code, of which I store only a hash, and when it runs out – and an email with a link goes to it. Only once you open that link within 24 hours does it become your address; the old one then gets a short note. Otherwise the note runs out, and your old address stays.

Legal basis: Art. 6 (1) (b) GDPR – without these details I can't offer you an account.

Your calendars, stamps and days

What you create in Boop is stored in your account: your calendars (name and color), the stamps you draw (name, shape, color and the drawing itself), and your prints – that is, which stamp sits on which day in which calendar, where, how big and turned how, in which color and placed by whom. Your own color and start view for a calendar are stored with your account too, so they hold on all your devices. If you upload an SVG file for a stamp, it is turned into a drawing in your browser; the file itself is not transferred. So everything is there on every device you're logged in on.

A short note can be kept for each day of a calendar. It is visible to all members of the calendar, stored with the account that changed it last, and deleted with the calendar. If you delete your account, your notes in other people's calendars stay; the link to you is removed.

You can share a calendar with other Boop accounts. Whoever is a member of a calendar sees its content – the days and all the prints on them, with the stamps they were made with – and the other members' display names; Boop shows their email addresses to nobody. A stamp's drawing is therefore on the members' devices too. Stamps you share with a calendar can also be used by its members themselves, and downloaded as a file for 3D printing. So only share a calendar with people who should see it. A calendar you don't share is seen only by you.

Sharing goes by an invitation to an email address. For it I store the address you enter, together with the calendar and who sent the invitation, and send that address an invitation email (via Resend, see below) – one per invitation, no reminders. If the address belongs to a confirmed Boop account, the invitation also shows up in that account's app – with the calendar's name and color and the display name of whoever invites – and, if switched on there, as a notification (see below). Nobody learns this way whether there is an account for an address. So that addresses can't be written to in rows, the number of invitations is limited.

Only whoever agrees becomes a member: with “Accept” in the app, or by following the link in the mail and logging in or signing up. Only then do they see the calendar, and the other members see their display name. Until then, whoever invited sees the invitation as open – with the address they entered themselves. “Decline” deletes it; for whoever simply ignores it, nothing happens. An invitation is valid for 14 days; the mail says so too. It is deleted once it is accepted, declined or taken back by you, or the calendar is deleted, otherwise when the 14 days are over. You can leave a calendar you're a member of at any time. Legal basis: Art. 6 (1) (f) GDPR; the legitimate interest is that you can share your calendar with people you choose yourself.

You can also subscribe to a calendar in your calendar app, such as Apple Calendar or Google Calendar. For that you create a private subscription address in its settings; stored with it are your account, the calendar, when you created the address and when it was last fetched (noted once a day at most). Through the address the calendar app – for some, such as Google Calendar, its provider's server – regularly fetches the calendar's days: the names of the stamps on them and the notes, in a shared calendar those of the other members too. The address needs no login: anyone who knows it can read along – so don't pass it on. You can take it back or replace it with a new one at any time; the old one then stops working at once, as it does when you leave the calendar, are removed from it or it is deleted. What the calendar app and its provider do with the data they fetch is governed by their privacy policies. Legal basis: Art. 6 (1) (b) GDPR, for the other members' entries (f) – your interest in seeing the shared calendar next to your appointments.

A stamp you drew yourself can be sent as a card: Boop turns it into a link you pass on to whomever you like. Stored with it are the stamp as it is at that moment (name, shape, color and drawing), a few words from you if you add some, your account and when you made the card. Whoever has the link sees – without an account, too – the stamp, your display name and your words; so only pass it on to people you want to show that to. The card stays until you take it back or delete the stamp or your account; after that the link leads nowhere. So that nobody makes cards by the bulk, their number is limited. Legal basis: Art. 6 (1) (b) GDPR.

Whoever opens a card and has an account can take the stamp into their stamps. They then get a copy that is theirs like a stamp they drew – if you later change how your stamp looks, that reaches the copy and the card too –, noted with where it came from: which account, with its display name as it was then, and the card's words. Whoever sent a card sees who took it – by display name, nothing else; so if you take a card, your display name is shown to the one it came from. The copies stay, even when you take the card back or delete your stamp or your account; with your account they lose the link to you, your name included. If someone shares a stamp they took with a calendar, its members only see that it came from a card – not from whom.

Now and then I give a stamp to everyone: every account with a confirmed address then gets a copy of it, noted “from Boop”, with a few words from me. It is a stamp of your account like any other; you can use it, share it or delete it. You learn of it in the app and – unless you switch it off in your account – as a notification (see below), not by email. So that a gift reaches nobody twice, the copy notes which gift it belongs to. Legal basis: Art. 6 (1) (f) GDPR; the legitimate interest is livening Boop up with something new now and then.

Search engines only find Boop's public pages, such as the home page and this page. Your calendars and stamps are not public and don't show up there.

To run Boop, I as the operator see your account's email address (and a new one still waiting to be confirmed), display name, language, whether the address is confirmed, and technical dates (created, last used, the reminder before deletion if any). I can't change any of it there, nor your password – I can only delete an account, lift a login lock and tick two boxes: “Never delete” keeps an account out of the automatic deletion (see below), “Admin” shows a link to the admin area in its app, also unlocks the stamp colors that aren't public there and allows sending a stamp of one's own to all accounts as a gift (see above) – nothing else: it gives no view into other people's accounts or content, and in the admin area one has to log in separately. Your calendars, stamps, prints, notes, cards, invitations and notification settings can't be viewed in the admin area. Only in a single case – to fix a bug or at your request – do I switch on a read-only view of them on the server, and off again afterwards. Regardless of this, whoever runs the server can technically access the database; I only do so when running the service or keeping it secure requires it. Legal basis: Art. 6 (1) (b) GDPR.

Emails via Resend

I send the emails to confirm your address (a new one too, with the note to the old one), to reset your password, to invite people to calendars and to remind you before a long unused account is deleted, as well as the messages from the contact form, through the mail service Resend (Resend, Inc., USA), which delivers them on my behalf (data processing). For this, Resend receives the email addresses involved and the content of the mail. Data may be transferred to the USA in the process; this is safeguarded by the European Commission's standard contractual clauses (Art. 46 (2) (c) GDPR). Legal basis for sending: Art. 6 (1) (b) GDPR, for invitations Art. 6 (1) (f) GDPR (see above).

Notifications

If you switch them on in a calendar's settings, Boop can send you notifications: a reminder when you haven't entered anything yet today (no print and no note), a message when someone else has stamped in the calendar, and – only if you switch it on separately – one when someone else changes something there (a note, prints, the name or who's in it). Also one when someone invites you to a calendar, and one when I give you a stamp; you switch those two off in your account. Cards set off no notification. Your browser or device asks for your permission first. Stored then are the address at which your device receives messages, with its keys, the device's time zone and language, your settings per calendar, whether you want to hear of invitations and gifts, and the time of the reminder.

The messages are delivered through the push service of your browser's or device's maker (e.g. Apple, Google, Mozilla or Microsoft). Their content – such as “Anna stamped in ‘Family’” – goes there encrypted; the service delivers it but can't read it. It sees that a message is delivered to your device. You can switch notifications off in a calendar's settings or in your account at any time, or withdraw your browser's permission; logging out and deleting your account remove the subscription. Legal basis: your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time.

Cookies and storage on your device

Boop only sets cookies that logging in needs. The login cookie holds a signed token that tells the server you're logged in; it is valid for 30 days. If you untick “Stay logged in” when logging in, it only lasts until you close the browser, a day at most – and beside it there is a second cookie that holds nothing but the note that this login ends with the browser. Logging out deletes both. Because your account can't work without them, they are strictly necessary and need no consent (§ 25 (2) no. 2 TDDDG). As long as you're not logged in, Boop sets no cookies at all.

Boop is a web app you can install, and it also works without internet. For that, Boop keeps your account's calendars, stamps and prints in your browser's local storage (IndexedDB) – along with your name and email address, the display names of your calendars' members, open invitations to you, changes that haven't reached the server yet and pictures of the stamps, so they appear faster – and a service worker caches the app's files so it opens without a connection too. Changes you make offline are sent to the server once you're back online.

Your browser also remembers a few small things (localStorage): the ink pad you chose last, how your stamps are sorted, which gifts from Boop you have seen, an invitation or a stamp card you opened before logging in – until you log in – and whether your login ends when the browser closes; and until the tab is closed, which invitations you put off with “Later” and which card you just took (sessionStorage).

This data stays on your device. Logging out, and deleting your account, deletes your account's data stored there, and you can remove everything yourself at any time in your browser's settings. If your login merely runs out, it stays on the device until someone logs in there again – so on a device you share with others, always log out. This storage, too, is strictly necessary for the feature you use (§ 25 (2) no. 2 TDDDG).

There are no other cookies – no tracking or advertising cookies, and no third-party analytics or tracking services.

Anonymous statistics

So I can see whether and how Boop is used, the site sends a short note to my server when a page is opened and on a few actions – for example “account created”, “stamp placed” or “calendar shared”. Only coarse details are stored: the page (the app counts as one single page; which calendar is open is not transferred), a coarse source (such as “Google” or “direct”, never the full address), the device class (phone, tablet or computer), operating system and browser with their major version, for an action its kind – never its content – and the time.

No cookies are set for this, no IP addresses stored and no identifiers assigned – single entries can neither be traced to a person or an account nor linked to each other. The entries are deleted after 90 days. Legal basis: Art. 6 (1) (f) GDPR; my legitimate interest is improving Boop. If your browser sends the “Global Privacy Control” signal, nothing is counted.

Retention and deletion

Your account data and everything you create in Boop is kept as long as your account exists. For everything else the periods named above apply: invitations 14 days, a new email address waiting to be confirmed 24 hours, the anonymous statistics 90 days, messages from the contact form until the matter is settled.

So that no data lingers that nobody needs any more, Boop tidies up once a day: a sign-up whose email address wasn't confirmed within 30 days is deleted. An account that wasn't used for 24 months – no login, no opening the app with a connection – is deleted; 30 days before, you get an email. Logging in once is enough, and everything stays as it is. It is only deleted if that email could actually be sent and you then stayed away for the full 30 days. It is deleted just as when you delete it yourself (see below). The only exception are accounts I ticked “Never delete” for – my own, for instance. Legal basis: Art. 6 (1) (f) GDPR together with the principle of storage limitation (Art. 5 (1) (e) GDPR).

You can delete your account yourself at any time: in the app under “Account” → “Delete account”. To be safe, Boop asks for your password as you do. Everything that belongs to it is then deleted: your calendars with all the prints on them – for their members too –, your stamps with all the prints made with them, everything you stamped in other people's calendars, and the invitations and cards you sent. Stamps others took from your cards stay theirs – without the link to you. In other people's calendars you are no longer a member afterwards. On the device you delete it from, the copy stored there is removed as well.

So that the other members' devices remove what was deleted as well, a technical deletion marker of it stays stored. It holds neither your name nor your email address nor your drawings.

Your rights

You have the right of access to your data (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on a legitimate interest (Art. 21 GDPR).

Much of it you can do right in the app under “Account”: you change your name and your email address there yourself. “Download data” gives you your account's data as a file (JSON) – your account, your calendars and memberships, your stamps (for those you took, with where they came from), your prints, your cards (and how often each was taken), the open invitations you sent and those to you. “Delete account” deletes your account with everything that belongs to it. For anything else, just write to me through the contact form above.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the one where you live.

No automated decisions

Boop makes no automated decisions about you and doesn't profile you (Art. 22 GDPR).

Changes

When Boop changes, I update this text. The version published here applies.

Last updated: 19 October 2026

Rights

Boop's software and design are mine – all rights reserved. What you draw yourself is yours. You'll find more of my work at mxwr.de.