Privacy policy
Deutsche Fassung · This is a translation; the German version is legally binding.
In short
- No account, no cookies, no tracking, no analytics.
- Your entries (headache log, habits, completed exercises) are stored only on your device and are never sent to us.
- The server only sees the technically necessary access data (see Server log files).
- YouTube videos are only loaded when you tap “Watch demo”.
Storage on your device
The app stores your entries (headache and neck stiffness scores, notes, ticked habits and completed routines) in your browser’s local storage (localStorage). In addition, a service worker keeps the app’s pages in the browser cache so it works offline. This data does not leave your device; we have no access to it. The app asks the browser to keep this storage persistent so it is not cleared automatically.
This storage is strictly necessary for the function you request (§ 25(2) no. 2 TDDDG). You can delete all data at any time via “Reset all data” on the Log page or by clearing this site’s data in your browser. An export file you create via “Export” is solely your responsibility.
Server log files
When you access the website, the server automatically processes information sent by your browser and stores it in log files:
- IP address
- Date and time of the request
- Requested address (URL) and HTTP status code
- Browser type, browser version and operating system (user agent)
- Referrer URL
This data is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. Log files are deleted automatically after 14 days.
Hosting
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you access the website, Hetzner processes the data listed above (including your IP address) on our behalf as a processor. A data processing agreement in accordance with Art. 28 GDPR is in place with Hetzner. The servers are located in Falkenstein, Germany.
YouTube videos
Some exercises have demo videos from YouTube. They are only embedded when you tap “Watch demo”; before that, no connection to YouTube is made. We use the privacy-enhanced mode (youtube-nocookie.com). Once a video loads, data such as your IP address, browser information and the page you are on is transmitted to YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. YouTube may store information on your device when a video plays.
The legal basis is your consent given by tapping (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time for the future by no longer opening videos. More information:Google privacy policy.
SSL/TLS encryption
For security reasons this site uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in the address bar and the lock icon in your browser.
Controller
The controller within the meaning of the GDPR is Philipp Hartenfeller,, email: (see also the imprint).
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as the right to object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21). Please contact the email address above. Since your app entries exist only on your device, we cannot provide information about them; you are in full control of them.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
Last updated: October 2026