Privacy policy
Please note: this is a translation for convenience. The site is operated from Germany and the German version is the legally binding one.
In short
You do not need an account to read. Without an account, a cookie is only set if you switch the language by hand. There are no analytics tools, no ad networks and no tracking. Embedded content from Spotify only loads after you explicitly click. Fonts and images are served from this site's own server, not from Google or anyone else. No data is passed on to third parties. If you do create an account, the section “Account and sign-in” below applies.
Controller
Martin LauterbachHauptstraße 25
56653 Wehr
Germany
E-mail: info@sunjindou.de
Server log files
When a page is requested, the hosting provider automatically records data in so-called server log files: browser type and version, operating system, referrer URL, host name of the requesting computer, time of the request and IP address. This data is not combined with other sources. The legal basis is Art. 6 (1) (f) GDPR — the legitimate interest in running the site free of technical faults. How long the data is kept is determined by the hosting provider.
Storage in your browser
The reading view remembers, in your browser's local storage, which text size you chose and which chapter you last opened. This stays on your device only, is never transmitted, and can be deleted at any time through your browser settings.
Language choice
The first time you open the home page, the server looks at the languages your browser sends
with every request anyway (the “Accept-Language” header). If German is not among them, you are
sent to the English version. That information is only evaluated for the redirect and is not
stored. No location lookup by IP address takes place. If you switch between DE and EN yourself
using the control in the menu, your choice is kept in a cookie called sjd_lang
(valid for one year, containing either “de” or “en”); after that you are no longer redirected.
The legal basis is your own choice — the cookie is created only by your click.
Account and sign-in
An account is optional — you do not need one to read. If you create one, I store your display name, your e-mail address, a non-reversible hash of your password (the password itself is stored nowhere), the time you signed up, as well as the chapter you last read, your bookmarks and your comments. The legal basis is Art. 6 (1) (b) GDPR — without this data the account cannot be run.
The e-mail address is used solely to confirm the account and to reset the password. There is no newsletter and no advertising.
You can delete your account yourself at any time under “My account”. All of the data listed above, including your comments, is then removed irrevocably.
Comments
Comments appear publicly under the respective chapter, with your display name and the time. Posts from new accounts are read before they are published. IP addresses are not stored for comments.
Failed sign-in attempts
To slow down automated password guessing, a failed sign-in attempt causes the IP address to be stored with a timestamp and discarded again after fifteen minutes at the latest. The legal basis is Art. 6 (1) (f) GDPR — the legitimate interest in keeping accounts secure.
Cookies
Without signing in, only the language cookie described above is set, and only if you switch the language by hand. Once you sign in, one or two more are added depending on your choice:
- Session cookie — a random identifier that lets the server recognise you during your visit. It contains no personal details and expires when you close the browser.
- “Stay signed in” cookie — only if you tick the corresponding box when signing in. It contains two random values and is valid for seven days. The database holds only a check value derived from it, together with a note of which browser and operating system you signed in with, so that you can tell your devices apart in your account. The value is renewed on every visit. Under “My account” you can see all devices signed in this way and sign them all out with one click; this also happens automatically when you sign out or change your password.
Both are necessary to run the account, and the second additionally requires your explicit choice. There are no tracking or advertising cookies.
Private areas
Images in private albums are only delivered to signed-in accounts that have been explicitly approved for them. Without that approval the files cannot be retrieved even via their direct address.
Spotify playlists
Two Spotify playlists can be shown on the home page. They are not loaded automatically: at first you only see a button. Only when you click it is the Spotify player loaded — at which point Spotify learns your IP address, technical details about your browser and, where applicable, whether you are signed in there. The legal basis for this loading is your consent under Art. 6 (1) (a) GDPR, which you give with the click and withdraw by reloading the page. The provider is Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. As long as you do not click, no connection to Spotify is made.
Downloads
The files in the tutorials section are stored on the same server as this site. Downloading them collects no data other than the server log files described above. No sign-in is required.
External links
This site contains links to X, YouTube, Steam and Disqus. A connection to the respective provider is only established once you click one of these links, and their privacy terms then apply. No content from these services is embedded in the site.
Your rights
You have the right to information, rectification, erasure, restriction of processing, objection to processing, and data portability. You also have the right to lodge a complaint with a supervisory authority. Please use the e-mail address given above.