Legal
Privacy policy
This site runs without tracking or advertising networks, and the typefaces are served from our own server. Loading the page sends no data to Google or anyone else — that happens only if you start an embedded video yourself and explicitly agree beforehand. The German version of this policy is the legally binding one.
1. Controller
Alexis Gross
Vinckestraße 1, 49086 Osnabrück, Germany
Email: info@alexisgross.de
2. Hosting and server logs
The site is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, acting as a processor under Art. 28 GDPR. Servers are located in Germany. When you visit, the host automatically records the page requested, date and time, data volume, browser and operating system, referrer URL and IP address. This happens on the basis of our legitimate interest in secure, error-free operation (Art. 6 (1) (f) GDPR). Log files are deleted after seven days at the latest.
3. Cookies
Only strictly necessary cookies are used, so no consent banner is required.
- agsid — session cookie used inside the protected books area to keep you signed in. Deleted when you sign out or close the browser.
- ag_lang — remembers your language choice (only the value “de” or “en”), stored for one year.
4. No analytics, no advertising
No web analytics, social media plugins, ad networks, map services or external fonts are embedded. All fonts, images and scripts are served from this site’s own server.
5. Videos in the “Social Media” section
All video thumbnails are stored on this site’s own server, so nothing is requested from a video platform when the page loads.
- Videos hosted here are served directly from this site. No third party is involved.
- WeChat and RedNote do not permit playback on third-party sites. Those posts show only a thumbnail, a QR code and a link. You leave this site only when you open that link.
- Embedded players (YouTube, Vimeo, Tencent Video, Bilibili) are
not loaded automatically. Instead of the player you see a notice asking
whether the video should be loaded. Only when you confirm is a connection to the
provider established, transmitting your IP address and technical details about
your device; if you are signed in there, the provider can link the request to
your account. The legal basis is your consent (Art. 6 (1) (a) GDPR), given by
that click. YouTube is embedded in its cookie-free variant
(
youtube-nocookie.com).
The providers are Google Ireland Ltd. (YouTube), Vimeo Inc. (USA), Tencent Holdings Ltd. and Bilibili Inc. (China). Providers outside the EU may not offer a level of data protection equivalent to European standards. As long as you do not load a video, no data is transmitted.
6. Protected books area
Access is by invitation only. We process: your email address, display name, password (stored only as a non-reversible hash), last sign-in time and language; invitation details (email, optional name and message, per-book permissions, a random token with an expiry date); a security log of failed sign-in attempts (IP and email, deleted after 30 days) to slow down automated attacks; and the texts and images you create or upload. Legal basis: Art. 6 (1) (b) and (f) GDPR. Account data is deleted when the account is removed — just send us an email.
7. Email
Invitations and password reset links are sent through the ALL-INKL.COM mail server. No external newsletter service is used and no opens or clicks are tracked.
8. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent with future effect (Art. 15–21, Art. 7 (3) GDPR). Please write to info@alexisgross.de. You also have the right to lodge a complaint with a supervisory authority — the competent one is Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.
Last updated: 15 September 2026