Privacy Policy
This policy explains which personal data is processed when you visit this website and use the localedeck platform (account). In short: we host with Cloudflare, use no third-party analytics or advertising services, and process account data solely to provide you the localisation platform.
1. Controller
Deckwerft UG (haftungsbeschränkt)
represented by Meikel Korfmacher
Fährstraße 181
40221 Düsseldorf, Germany
Email: meikel@korfmacher.at
2. Hosting (Cloudflare)
This website and the application are delivered via Cloudflare (Cloudflare Germany GmbH, Rosental 7, 80331 Munich, as the sales entity of Cloudflare, Inc., USA; we use Cloudflare Workers, D1, R2 and Pages). When you access the site, Cloudflare processes technically necessary connection data (e.g. IP address, date, time, requested resource, referrer, user agent) to deliver the site and defend against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). Cloudflare is certified under the EU-US Data Privacy Framework; Standard Contractual Clauses apply in addition and a data processing agreement is in place. Details: Cloudflare privacy policy.
3. Account & sign-in
To use the application you create an account. We process your name, email address and a hashed password (authentication via better-auth) and a strictly necessary session cookie, plus the content you enter (projects, languages, keys, translations), team memberships and access tokens for the sync API. Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Data is stored until you delete your account; you can export your content at any time from within the application (data portability).
4. Transactional emails (Resend)
Sign-in links, invitations and account notifications are sent via the service provider Resend (Resend, Inc., San Francisco, USA). Your email address and the message contents are transferred to the USA; the transfer is safeguarded by a data processing agreement with EU Standard Contractual Clauses. Legal basis: Art. 6(1)(b) GDPR. No marketing emails are sent.
5. Automatic translation (DeepL)
If you use automatic translation in the editor, we transmit only the texts to be translated (no account or credential data) to DeepL SE, Maarweg 165, 50825 Cologne (processing within the EU). Translation happens only on your manual request; under the DeepL API terms, submitted texts are not used to train models. Legal basis: Art. 6(1)(b) GDPR.
6. Cookies
For sign-in we set a strictly necessary session cookie. It only maintains your session and requires no consent (Art. 6(1)(f) GDPR). This marketing site uses no tracking or analytics cookies.
7. Fonts
The fonts used are self-hosted and served directly from this website. There is no transfer to Google or any other third party.
8. Retention
Account data and content are stored for as long as your account exists and are removed or anonymised after deletion, unless statutory retention obligations apply.
9. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), and you may withdraw consent at any time with effect for the future (Art. 7(3)). You also have the right to lodge a complaint with a supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (ldi.nrw.de).
10. Processors
- Cloudflare, Inc. — hosting, database (D1), object storage (R2), CDN
- Resend, Inc. — sending of transactional emails
- DeepL SE — automatic translation (on request only)
11. Changes to this policy
We update this privacy policy whenever the processing changes. Last updated: September 2026.