Privacy

Controller

Thomas Walkling
Thomas-Mann-Strasse 7
98693 Ilmenau
Germany
Email: post@nc-newmedia.de

What happens when you open a page

As with any web server, technical details are logged when a page is requested:

• the IP address of the requesting device
• the date and time of the request
• the address requested and the amount of data transferred
• the referring page, where the browser sends one
• browser identification and operating system

These are technically necessary to deliver the site and to detect faults or attacks. The legal basis is Article 6 (1) (f) GDPR, the legitimate interest in secure operation. They are not combined with other data and not used to analyze the behavior of individuals.

Hosting

The site is hosted by ALL-INKL.COM - Neue Medien Muennich, Hauptstrasse 68, 02742 Friedersdorf, Germany. The provider processes the log data above as a processor under a contract in accordance with Article 28 GDPR. The servers are located in Germany.

What is stored in your browser

So that settings survive until your next visit, the site keeps a few values in your browser's local storage: the color scheme you chose, the speed and pitch of the audio, and later the progress of the training exercises.

These are not cookies. The values never leave your device, they are not sent to any server, and they contain nothing by which a person could be identified. They are stored only because you changed a setting yourself, which makes them necessary for the service you asked for. No consent is required for that.

You can clear them at any time through your browser settings, under site data.

What the tools do and do not do

The translator, the audio output, the light signal and the speed calculator run entirely as JavaScript in your browser. There is no endpoint an input could be sent to, and no record of what you type.

When you share a link to a translation, the text sits in the fragment of the address, the part after the hash. Browsers do not send that part to the server. It is however part of the link itself: whoever receives the link sees the text, and whoever forwards it passes the text on.

The audio decoder uses the microphone, the light decoder the camera. Your browser asks for permission first, and without it nothing happens. What follows stays on your device: the sound is broken into frequencies in the browser, the camera image is measured for brightness there. Nothing is recorded, nothing is buffered, nothing is transmitted. The moment you close the tool or leave the page, the access ends.

Account and ranking

Everything on this site works without an account. But anyone who wants to appear in a ranking needs an identifier that ties their results together - otherwise any list would be arbitrary. That happens in two steps, and the first one is already enough.

Device key

The first time you press "Create device key", your browser generates a long random number and keeps it. The server stores only its hash, plus a nickname it rolls itself and - if you enter one - a country. No name, no address, no email. The legal basis is Article 6(1)(b) GDPR: without that identifier the participation you asked for is not possible.

Account

An account is only added if you want your progress on a second device as well. The server then also stores your email address and a hash of your password. The address serves confirmation, password resets and, should a subscription exist later, its handling. It is not used for advertising and not passed on.

What is expressly not stored

• No IP address. The interface does throttle abuse, but it stores no address for that - only a hash with a daily key, deleted after an hour.
• No location from the IP address. The country in the ranking is the one you enter yourself; you may leave it empty.
• No cookies. The device key sits in local storage and is only sent along when you contribute something to the ranking yourself. The browser never sends it on its own.
• No real name. The ranking shows a rolled nickname or your amateur radio callsign - whichever you pick.

Age

An account requires a confirmation that you are 16 or older (Article 8 GDPR). No date of birth is stored. Everything else - translator, decoder, trainers, simulation - works without an account and therefore regardless of age.

Deletion

The account page has "Delete everything". Email address, password and nickname vanish at once, the devices are detached, and the local progress in the browser goes with them. Results already submitted stay in the ranking without a name, because removing them would shift everyone else's position - they cannot be traced to a person afterwards.

Sending email

Confirmation messages go through a mailbox at the same provider that hosts the site (ALL-INKL.COM). No mail service outside the EU is involved.

No cookies, no tracking, no advertising

This site sets no cookies, embeds no analytics, and loads no fonts and no third-party scripts. Everything the browser loads comes from the same server as the page. That is why there is no consent banner here: there is nothing to consent to.

One exception: the CW world map. It shows a real map, and map data cannot be shipped along. The tiles come from karten.wpsys.de - an own server of the same operator, not a third-party map service. While loading, that server sees your IP address, as any server does from which something is loaded. It only happens once you explicitly click "Load map" on the map page; for anyone who does not, the paragraph above still holds. The program that draws the map sits on our own server and is not loaded from there. Your callsigns stay in your browser and are not transmitted.

If advertising is added later, it will be described here first, and the consent then required will be obtained properly.

Feedback

The form on the Feedback page lets you report what is wrong or what is missing. Stored is exactly what you write into it: the kind of report, your text, the language, and the path of the page you opened the form from.

Not stored: no IP address, no identifier, no link to your device or account. Feedback cannot be traced to anyone - not even by us. Against abuse the interface throttles using the same day-keyed hash as everywhere else, and that is deleted after an hour.

The email address is optional. It has exactly one purpose: to be able to ask back about a bug report. Leaving it out still lets you send the form. The legal basis is our legitimate interest in understanding and fixing reported faults (Art. 6(1)(f) GDPR); if you enter an address, that is your consent to being contacted (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Feedback is deleted after 180 days, along with any address entered. Please do not write anything into it that is nobody else's business - it is a free text field, and what stands there, stands there.

Your rights

Under the GDPR you have the right to access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and to object to processing based on legitimate interests (Article 21).

You may also lodge a complaint with a supervisory authority. The competent one here is the Thuringian Commissioner for Data Protection and Freedom of Information, Haesslerstrasse 8, 99096 Erfurt, Germany.

An email to post@nc-newmedia.de is enough to make a request.

Version

This notice applies from 29 August 2026. It will be updated as soon as anything changes about the processing described here.