Privacy Policy

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit our website pinoutdb.org. Personal data is any data that can be used to identify you personally.

Data Controller

2. Hosting & Content Delivery Network (Cloudflare)

This website is delivered via the global edge network of Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA), which acts as our content delivery network (CDN) and protects the site against DDoS attacks and abuse. Page requests are routed through Cloudflare's network, during which technical server logs (e.g. IP address, browser type, referrer, timestamp of access) may be processed briefly. The legal basis for this is our legitimate interest (Art. 6(1)(f) GDPR) in a fast, stable, and secure delivery of the website.

GDPR compliance: We have a Data Processing Agreement (DPA) with Cloudflare pursuant to Art. 28 GDPR. Cloudflare is certified under the EU-U.S. Data Privacy Framework (DPF) and additionally relies on EU Standard Contractual Clauses (SCCs) as a basis for any transfers of data to the United States. On this basis, the use of Cloudflare is considered GDPR-compliant.

3. Analytics with Plausible Analytics (self-hosted)

To measure page visits anonymously and statistically, we use Plausible Analytics, run on our own server infrastructure at analytics.pinoutdb.org. This is not the hosted cloud service operated by Plausible Analytics OÜ: your data never leaves our own infrastructure and is not shared with any third party.

Plausible does not use cookies and does not employ any form of device fingerprinting. IP addresses are only used momentarily to compute unique visitor counts (via a daily-rotating, non-reversible hashing method) and are not stored afterwards. No personal profiles are created and no individual is tracked across websites.

GDPR compliance: Because no personal data within the meaning of the GDPR is collected, no cookies are set, and no information is stored on your device, the use of Plausible is permissible on the basis of our legitimate interest in anonymous, aggregate analytics (Art. 6(1)(f) GDPR); no cookie consent banner is required for this. Since we operate Plausible ourselves, there is also no need for a Data Processing Agreement with an external analytics provider.

4. Further Data Collection on our Website

Local Storage (LocalStorage)

We do not use any third-party tracking or advertising cookies. We only use your browser's local storage (localStorage) to remember your chosen interface preferences (e.g., dark/light theme, pin color filters) locally on your device.

Issue Reporting & Spam Protection (Cloudflare Turnstile)

When you submit an issue report for a component, the data you enter (issue description, optional contact email) is stored to process your feedback. To prevent automated spam, we utilize Cloudflare Turnstile, which verifies human interactions in the background without intrusive challenges or classic tracking cookies, and operates under the same Cloudflare DPA basis described in Section 2.

5. Your Rights

Under the applicable statutory provisions, you have the right at any time to free-of-charge information about your stored personal data, its origin, recipients, and the purpose of processing, as well as a right to rectification, restriction, or erasure of this data. You also have a right to data portability and a right to object to processing where it is based on Art. 6(1)(f) GDPR. Please contact the address provided above at any time. You furthermore have the right to lodge a complaint with the data protection supervisory authority responsible for you.