Mantaflare
This English version is a convenience translation. The German version is legally binding.
PRIVACY
Privacy policy
Mantaflare is a private, non-commercial portal for invited friends and family members. This policy describes which data is processed when you use it.
Controller
Philipp Klockenbusch
Email: [email protected]
Public pages
These information pages on mantaflare.com set no cookies, store nothing in your browser, and contain no analytics, advertising or tracking services, no embedded third-party content and no external fonts.
The pages are delivered through Cloudflare. When you open a page, Cloudflare processes technically necessary connection data such as IP address, time, requested address and browser identifier in order to deliver the page and protect it against abuse. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).
Signing in with Google
The portal at start.mantaflare.com and the apps made available there at apps.mantaflare.com can only be reached after signing in. Sign-in uses your Google account; access is checked by Cloudflare Access.
- Data taken from Google: only your name and email address. No other Google data is requested, so there is no access to Gmail, contacts, calendar, Drive or similar.
- Purpose: to determine whether you have been approved, to show you your account and the services available to you, to check when you open an app whether it is available to you, or to match your access request.
- No disclosure: this data is not sold, not used for advertising and not passed on to third parties, except to the technical service providers named above as part of signing in.
- Session cookie: after signing in, Cloudflare sets a technically necessary cookie so that you stay signed in for the duration of the session (at most 12 hours).
The legal basis is providing the access you requested (Art. 6(1)(b) GDPR). Google’s privacy policy additionally applies to signing in with Google.
Access requests
Anyone who is signed in but not yet approved can request access in the portal. This stores the email address of the Google account, the name you entered, an optional message, and the date and status of the request. Only Philipp Klockenbusch can see these requests. When a request is approved, it is moved into the member list; rejected requests are deleted automatically after 30 days.
Member list
For each approved member, name, email address, role, the date of approval (“member since”) and the approved groups and individual apps are stored in a private list on a computer belonging to Philipp Klockenbusch. Entries are deleted as soon as you no longer wish to be a member or your access ends. Administrative actions (for example approving, changing or removing a member) are logged with the time, the acting person and the affected email address. The log also includes name changes made by members and requests to end access, and holds at most the last 500 entries.
Settings in the portal
As a member you can change your display name yourself in the portal and choose appearance (light, dark or automatic color scheme, accent color) and language. This information is stored in your entry in the member list.
In addition, your browser stores the appearance and language setting locally (localStorage on start.mantaflare.com) so that the portal is displayed correctly as soon as it loads. This is not a cookie, is not sent to us or to third parties, and is not used for tracking. You can delete it at any time in your browser settings.
Ending your access
In the portal you can use “End access” to request that your access be ended. This stores the time of your request in your member entry until Philipp Klockenbusch removes the entry. When the entry is removed, all data stored about you is deleted.
Service providers
- Cloudflare, Inc. (delivery, protection and access checks)
- Google (signing in with your Google account)
Processing in the USA may take place. According to their own statements, both providers base such transfers on the EU-US Data Privacy Framework or standard contractual clauses.
Your rights
You can request information about your stored data at any time, as well as rectification, erasure, restriction of processing or data portability. You can also object to processing. A short email to the address above is enough. You also have the right to lodge a complaint with a data protection supervisory authority.