Privacy Policy
Auf Deutsch: Datenschutzerklärung
2. Generated Results Are Never Stored
ZaaS will never store, log, or retain any results generated by the API - no dice rolls, no UUIDs, no random numbers, no colors, no coordinates, and no other outputs are written to any persistent storage or log file. Results exist only in the HTTP response sent directly to your client.
3. Data We Process
When you use ZaaS, the following technical data is processed:
- IP address - processed transiently for rate limiting (held in memory only, never written to disk) and recorded in server access logs for operational purposes.
- HTTP request metadata - HTTP method, request path, response status code, and response duration are recorded in server logs for operational monitoring. No request or response bodies are logged.
- Request ID - a random identifier generated per request for log correlation. It is not linked to any user identity.
Legal basis: Art. 6(1)(f) GDPR - legitimate interest in ensuring the security, stability, and correct operation of the service (rate limiting, abuse prevention, error diagnosis).
4. Cookies
This website does not use cookies.
5. Local Storage
Your theme preference (light or dark mode) is stored in your browser's local storage under the key theme. This data never leaves your device and is never transmitted to the server.
6. No Analytics or Tracking
ZaaS uses no analytics services, advertising networks, or third-party tracking scripts. No data about your behavior on this site is shared with third parties.
7. Infrastructure Providers
ZaaS is hosted on infrastructure provided by third-party providers operating within the European Union. These providers may process technical data (such as IP addresses) as part of normal infrastructure operation. They are bound by data processing agreements in accordance with GDPR Art. 28.
8. Map Tiles (Coordinates Tool)
When you use the Random Coordinates tool and a map is displayed, your browser loads map tiles directly from the OpenStreetMap tile server operated by the OpenStreetMap Foundation (OSMF) at tile.openstreetmap.org. Each tile request reveals your IP address to OSMF servers. The Leaflet mapping library itself is bundled with this site and loaded locally - no data is sent to a CDN for the library assets.
If you do not use the Random Coordinates tool, no tile requests are made. OSMF's privacy policy is available at wiki.osmfoundation.org/wiki/Privacy_Policy.
9. Data Retention
Server access logs are retained according to the default rotation policy of the infrastructure and are deleted automatically. Rate-limit counters are held in memory only and are lost whenever the service restarts - they are never written to persistent storage.
10. Your Rights
Under GDPR, you have the right to:
- Access the personal data we hold about you (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure of your data ("right to be forgotten") (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to processing (Art. 21)
- Lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at)
To exercise your rights, contact us at privacy@zaas.at.
11. Changes to This Policy
If we make material changes to this privacy policy, we will update this page. We encourage you to review it periodically. Continued use of ZaaS after changes constitutes acceptance of the updated policy.