Privacy notice

Last updated: July 29, 2026

1. Controller

2. Scope

This notice covers daviddam.de and the linked services at pdscanlation.daviddam.de, hwsuche.daviddam.de, pd-voice-agent.daviddam.de, ygo-db-stats.daviddam.de and cv.daviddam.de.

3. Hosting and server logs

When a page is requested, its hosting provider processes technically necessary connection data. This may include the IP address, time, requested URL, transferred volume, referrer, browser, operating system and response status. Processing is necessary to deliver and secure the services, diagnose errors and prevent attacks. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure and reliable operation. The portfolio does not maintain its own visitor database or create visitor profiles.

daviddam.de, pdscanlation.daviddam.de, hwsuche.daviddam.de and pd-voice-agent.daviddam.de are hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. cv.daviddam.de and ygo-db-stats.daviddam.de are hosted by GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. Providers delete or anonymise logs when they are no longer needed for technical, security or legal purposes under their respective retention rules.

4. Transfers to the United States

The providers may process data outside the European Economic Area. Transfers rely on the applicable safeguards under Chapter V GDPR, in particular an adequacy decision for certified organisations or the EU Standard Contractual Clauses.

5. Language preference

After a language is selected, the portfolio stores “de” or “en” under “pd_lang” in browser Local Storage. It remains on that device until changed or deleted, is not sent to us and is used only to provide the requested language. The legal basis for any related personal data is Article 6(1)(f) GDPR; access is necessary for the requested function under section 25(2)(2) TDDDG.

6. Contact by email

If you contact us by email, we process your address, message and necessary metadata to answer it. The legal basis is Article 6(1)(f) GDPR or Article 6(1)(b) GDPR for pre-contractual communication. Data is deleted after the request is resolved unless legal retention duties or legitimate reasons require longer storage.

7. Project-specific processing

PDScanlation

The application processes sign-in data, uploaded PNG, JPG or WebP files, recognised text, translations, job metadata and output files to provide the requested translation and typesetting under Article 6(1)(b) GDPR. A technically necessary signed “pd_session” cookie maintains guest sessions for up to 24 hours and owner sessions for up to 30 days. “pd_lang” stores the language locally.

Guest jobs are deleted after 24 hours. Owner jobs remain for no more than seven days or a limit of 20 jobs; a rolling archive of the last 30 output pages may also be retained. URL import previews are deleted after six hours. For URL imports, the server requests the external page supplied by the user; its operator receives the server IP and technically necessary request information.

Depending on the selected configuration, translation may use Anthropic, Google Gemini, Mistral, OpenRouter or NVIDIA NIM. The selected provider receives recognised text and the instruction, not the raw uploaded image. Optional Telegram bot use processes chat IDs, messages and images through Telegram.

Hamburg Wohnungssuche

The public guest feed does not require a visitor account. It consolidates housing listings from publicly available sources. These may include addresses, descriptions, rent details and contact information published by the advertiser. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is searching, deduplicating and presenting current Hamburg rental listings. The public read model is generally retained on a rolling seven-day basis.

Password-protected owner functions process favourites, hidden listings, notes, search profiles and application drafts. Applicant details and documents may also be stored locally, including contact, employment and income information, SCHUFA records, payslips, identity documents and self-disclosures. These functions are not available to public guest users. A technically necessary “hwsuche_session” cookie authenticates the owner.

The read model uses Turso/libSQL in the EU; private application-draft screenshots may be stored in Vercel Blob. Depending on configuration, listing data or application drafts are sent to Mistral, OpenRouter or Anthropic. Notifications and drafts may be sent through Telegram. Optional Gmail API access reads property search alerts and marks them as read.

HR Voice Agent

The current public application is an explicitly started concept demo and makes no employment decision. Microphone audio is transmitted in real time through LiveKit. Speech recognition and synthesis run on first-party infrastructure using faster-whisper and Piper. Conversation content is sent to Anthropic through Claude for responses by default, or to Mistral when that alternative is configured. The legal basis for the user-started session is Article 6(1)(b) GDPR.

Audio is not recorded or stored as a file. The transcript remains in the browser during the conversation. For an explicitly requested concept review, no more than 80 turns or 8,000 characters are sent once to the review model and are not stored persistently. Session tickets, the random guest identifier and room ID expire after no more than ten minutes. Cloudflare Turnstile may optionally be used to prevent abuse; Cloudflare then receives challenge data and the IP address. “pd_lang” stores the language locally, while an optional “pd_voice_agent_auth” cookie keeps an authorised session for seven days.

YGO DB Stats

The static analysis processes publicly visible online player identifiers and match data from Duelingbook into deck, card, matchup and player statistics. For top players it also publishes rating, deck, wins, losses, last activity and public replay data including game ID, time, opponent identifier and rating, result and card IDs. Additional card data comes from YGOPRODECK. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is statistical presentation of publicly observable play.

There is currently no fixed automatic deletion period for these historical statistics. Identifiers remain stored while they form part of the published statistical time series. Affected persons may object on grounds relating to their situation and request correction or removal of an identifier; the objection will be balanced against the statistical interest.

CV

The CV publishes professional information supplied by the controller. Its theme switch stores the selected appearance locally in the browser. Scripts from cdnjs and jsDelivr may be loaded for mathematical diagrams and browser compatibility. It contains no contact form or active web analytics.

8. Recipients and external services

Where a project function needs another provider, that provider receives only the data needed for its service. Depending on the project and configuration, recipients include Vercel, GitHub, LiveKit, Cloudflare, Turso, Telegram, Google, jsDelivr, cdnjs, YGOPRODECK and the AI providers named above. YGO DB Stats also loads Google Fonts, jQuery and DataTables from external providers. Ordinary links to GitHub, Duelingbook or other sites transfer data only after they are opened. The central portfolio embeds no analytics, advertising, map or video services. Its web fonts are served with the site and do not create a connection to Google Fonts during a visit.

9. Data subject rights

Subject to the GDPR, individuals have rights of access, rectification, erasure, restriction, data portability and objection. Consent may be withdrawn at any time for the future. Requests can be sent to the email address above.

10. Complaints

You may lodge a complaint with a data protection authority. The competent authority includes the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany, datenschutz-hamburg.de.

11. Updates

This notice will be updated when functions, providers or legal bases change. The version published on this page applies.