Skip to content

Privacy Policy

For this website · Last updated: 5 September 2026

This English version is provided for convenience. In case of doubt, the German version is authoritative.

1. Controller

The controller for data processing on this website is:
Jonas Berenshausen
c/o Stahlbau Berenshausen
Untere Aue 14
37318 Uder OT Schönau
Email: contact@twentythreeforge.com

2. Overview & principle

This is a static website without user accounts. We use no cookies, no tracking and no analytics or advertising services. Personal data is only processed where technically required to operate the site (hosting) or when you contact us by email. The only thing stored on your device is your language preference, if you choose one — see section 4.

3. Hosting, CDN & server log files

This website is hosted on Cloudflare Workers and delivered via Cloudflare's content delivery network (CDN). Provider (processor):
Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany — part of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

When the website is accessed, Cloudflare automatically processes technically necessary access data in so-called server log files, which may include:

  • IP address of the requesting device
  • date and time of access
  • page / file requested
  • amount of data transferred and HTTP status code
  • referrer URL, browser type and operating system

Purpose: provision, stability, performance and security of the website (including protection against attacks and overload). Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure, trouble-free and efficient operation). Retention: Cloudflare stores this access data only for a short period and then deletes or aggregates it; details are governed by Cloudflare's own privacy policy.

Data processing agreement and third-country transfer: We have concluded a data processing agreement (DPA) with Cloudflare. Processing may also take place on servers outside the EU/EEA, in particular in the USA. Cloudflare relies on the Standard Contractual Clauses of the EU Commission pursuant to Art. 46 (2) (c) GDPR to safeguard such transfers. Further information: https://www.cloudflare.com/privacypolicy/.

4. Language preference (local storage)

If you switch the site language using the EN/DE toggle, that choice is saved in your browser's local storage under the key tf-lang, so that the site opens in your chosen language next time. This is a purely local storage entry: it holds only the value en or de, it is not a cookie, and it is never transmitted to us or to any third party. No profile is created and you are not identified.

If you have not made a choice, nothing is stored. On the start page we then read your browser's language setting once, in your browser and without storing anything, in order to open the German version for German-language browsers.

Legal basis: § 25 (2) no. 2 TTDSG (storage strictly necessary to provide a service you have expressly requested — namely remembering the language you selected). You can delete the entry at any time via your browser settings (delete site data).

5. Contact by email and form

If you contact us by email, we process the data you provide (e.g. email address, name, message content) to handle your request. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual / contractual measures) or (f) GDPR (legitimate interest in responding). We store this data until the purpose no longer applies and then delete it, unless statutory retention obligations prevent this.

The support page offers a form. We process the category, the type of message, the message text and — if you provide one — your email address, solely in order to read and answer your message. Providing an email address is optional; without it we simply cannot reply. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in handling enquiries and feedback), and Art. 6 (1) (b) GDPR where the message concerns one of our apps.

Submissions are not stored on the server. The form sends your message to our own Cloudflare Worker, which forwards it as an email through our own mail provider and keeps no copy. It is then subject to the same handling as any other email to us. To limit abuse, the number of submissions per IP address is capped for a short period; the address is processed briefly for this and is not stored permanently by us.

6. No sharing with third parties

Your data is not shared, except with the hosting provider named in section 3 as part of order processing, with our email provider who operates the mailbox this form delivers to, or where we are legally obliged to do so.

The mailbox this form delivers to automatically forwards incoming email to an account at Google (Google Ireland Limited, Ireland), so that enquiries are noticed promptly. The content of your message and — if you provide one — your email address are therefore transmitted to Google and stored there. Google does not process this data on our behalf but under the service's own terms. Processing outside the EU cannot be ruled out. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in handling enquiries promptly). If you would rather not have this, write to me directly at the address given on the support page — though the same forwarding applies there too.

7. Your rights

Under the GDPR you have the following rights:

  • access to your stored data (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to processing (Art. 21 GDPR)

An informal email to contact@twentythreeforge.com is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority is the Thuringian Commissioner for Data Protection and Freedom of Information (TLfDI), Häßlerstraße 8, 99096 Erfurt, Germany — https://www.tlfdi.de.

8. Data security (SSL/TLS)

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in your browser's address bar.

9. Privacy for the apps

Our apps have their own privacy policies:

10. Changes

We adjust this privacy policy as soon as changes to the website or the legal situation require it. The version published here at the time applies.