Privacy Policy

1. Data controller

The controller responsible for the processing of personal data on this website within the meaning of Art. 4(7) GDPR is:

Gerd Hoeschen (ottic)
Westerwaldstraße 35
53489 Sinzig
Germany
Email: contact@ottic.de

2. General information about data processing

We process personal data only to the extent necessary to operate this platform. We process personal data in accordance with the GDPR and, where applicable, the national data protection legislation of the country in which the controller is established. The legal bases are set out in Art. 6(1) GDPR.

3. Data we process

Account data

When you register an account (email address, password as a one-way hash, account tier, chosen language, activation status). Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (legal obligation).

Profile and content data

Profile information you provide (nickname, handle, profile and header pictures, biography, links, imprint/contact field), posts, comments, messages, likes, bookmarks, follows and idea drops. Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (contract).

Technical usage data

IP address, browser type, and basic request data, used for security, fraud prevention, and rate limiting. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the platform).

Cookies and local storage

A session cookie that is strictly necessary to keep you signed in, and local browser storage for your theme preference and cookie-consent choice. These are not used for advertising or tracking. Legal basis: Art. 6(1)(f) GDPR (legitimate interest) and, where consent is required, Art. 6(1)(a) GDPR.

4. Purposes of processing

We process personal data for the following purposes:

Providing and operating the platform (posting, commenting, messaging, following);
Managing your account, subscriptions and invite codes;
Security, abuse prevention and rate limiting;
Sending service emails (account activation, password resets, notifications);
Complying with legal obligations (e.g. retention duties).

5. Recipients of data

Personal data is shared only with:

Our hosting provider [hosting provider name and country] for the operation of the servers;
Our email service provider [email provider name and country] for sending transactional emails;
Publicly visible content (posts, comments, profile information) is visible to other users in accordance with the visibility settings you choose — this is an inherent function of the platform.

Data is not sold to third parties. Where service providers are engaged, data processing agreements (Art. 28 GDPR) are concluded.

6. Retention periods

We retain personal data only for as long as necessary for the purposes described above:

Account data: until you delete your account. Deleting your account permanently removes your data (profiles, posts, comments, messages and uploads) from the system;
Technical usage data (IP addresses for security and rate limiting): [e.g. 30 days];
Where retention is required by law (e.g. commercial and tax retention duties), data is retained for the legally required period [e.g. 10 years] and then deleted.

7. Your rights

As a data subject you have the following rights under the GDPR:

Right of access (Art. 15 GDPR);
Right to rectification (Art. 16 GDPR);
Right to erasure (“right to be forgotten”, Art. 17 GDPR);
Right to restriction of processing (Art. 18 GDPR);
Right to data portability (Art. 20 GDPR);
Right to object (Art. 21 GDPR);
Right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal (Art. 7(3) GDPR).

To exercise any of these rights, contact us at the address above. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, your place of work, or the place of the alleged infringement.

8. Cookies

This website uses the following cookies and local storage:

Name	Type	Purpose
ottic_session	Strictly necessary	Keeps you signed in (session management)
ottic-theme	Local storage	Remembers your light/dark theme preference
ottic-cookie-consent	Local storage	Remembers your cookie-consent choice

You can delete or block cookies at any time in your browser settings. Blocking strictly necessary cookies may prevent you from signing in.

9. Contact for privacy questions

If you have any questions about this privacy policy or the processing of your personal data, please contact us at [privacy contact email] or by post at the address given in section 1.