DuctTape.ioDuctTape.io
Deutsch

Privacy notice

Last updated: 4 October 2026

Controller

Mario Fraiß-Kollmanitsch
c/o FRAISS Holding GmbH
Herrengasse 9
8010 Graz
Austria
E-Mail: hello@theducttape.io

In short

  • We process only what is needed to run DuctTape.io: your account, your diagrams and technical access data.
  • There is no advertising, no ad tracking and no marketing cookies.
  • Your diagrams are private until you publish them. A published snapshot is visible to anyone with the link and may be indexed by search engines.
  • You can export your data and delete your account in the settings.

Data we process

  • Account data: e-mail address, display name, profile picture and, if you sign in through a third party such as GitHub, its identifier. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
  • Content: your diagrams including title, description and preview images. Legal basis: performance of the contract.
  • Published diagrams: the snapshot, its title, its description and your display name are publicly accessible until you withdraw the publication.
  • Access data: IP address, time, requested address and browser details in server logs, and short-lived counters per IP address or account to prevent abuse. Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR).
  • Audience measurement: Vercel Web Analytics counts page views without cookies and without recognising you across devices. Legal basis: legitimate interest in privacy-friendly statistics.

Cookies

We only set technically necessary cookies: for your sign-in (Clerk) and for the chosen language. These do not require consent.

Service providers

We use the following processors:

  • Vercel Inc. (USA): hosting, delivery, Web Analytics and storage of preview images. The application runs in the Frankfurt region.
  • Neon (Databricks Inc., USA): database, stored in Frankfurt.
  • Clerk Inc. (USA): sign-in and account management.
  • Upstash Inc. (USA): counters for request limits, stored in Frankfurt.

Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework or on standard contractual clauses.

Retention

  • Account and diagrams: until you delete them. Deleted diagrams stay in the trash for 30 days and are then removed for good.
  • Deleting your account removes all your diagrams including their publications.
  • Server logs and abuse counters: only as long as secure operation requires.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Write to the address above. You may also lodge a complaint with a supervisory authority; in Austria this is the Datenschutzbehörde (dsb.gv.at).

Changes

If the processing changes, we update this notice. The version published here applies.