Privacy Policy

Who is responsible

Tobias Riemenschneider is responsible for this website and the Schreibmaschine account service. You can reach me at tobsidion@tobiasriemenschneider.com.

Your notes

Schreibmaschine stores your notes as Markdown files in a folder on your Mac. They are never uploaded to this website and I can't read them.

Your account

You need an account to download Schreibmaschine. For it I store:

• your name and email address,
• your password, only as a one-way hash, or your passkeys' public keys,
• your two-factor authentication secret, encrypted, if you turn it on,
• when you confirmed your email address.

I use this data to provide your account, under Art. 6(1)(b) GDPR.

Sign in with Google

If you sign in with Google, Google tells me your name, your email address, whether Google has verified that address, an ID for your Google account and the address of your profile picture. I store the ID to recognise you next time, and a copy of your picture to show it while you're signed in, so your browser never loads it from Google. Deleting your account deletes the copy. Nothing else is shared, and I can't post or read anything in your Google account. Google's own handling of your data is described in its privacy policy.

Sign in with Apple

If you sign in with Apple, Apple tells me your email address, whether Apple has verified it, an ID for your Apple Account and, the first time only, your name. If you choose to hide your email, I only get an address at Apple's relay service that forwards to yours. I store the ID to recognise you next time. Nothing else is shared, and I can't read anything in your Apple Account. Apple's own handling of your data is described in its privacy policy.

Downloads

When you download the app, I record that your account did, and when. This shows me how many people use Schreibmaschine and helps spot abuse. That is my legitimate interest under Art. 6(1)(f) GDPR.

Cookies and sessions

The site only sets cookies it needs to work: a session cookie that keeps you signed in, a security token against cross-site request forgery, a "remember me" cookie if you stay signed in, and one that remembers your light or dark appearance. With each session I store your IP address and your browser's user agent, so sessions can be secured and signed out.

Email

I only send emails your account needs, like confirming your address or resetting your password. They are delivered through Amazon Simple Email Service (Amazon Web Services). No newsletters unless you ask for them.

The Mac app

The app talks to this website to sign you in and to check for updates. Like any request on the internet, this sends your IP address. The server keeps short-lived technical logs for security and troubleshooting.

How long I keep data

I keep your account data until you delete your account, which you can do any time in your settings. Your download records then stay only as anonymous counts. Sessions end when you sign out or after they expire.

Your rights

You can ask me what data I hold about you, and have it corrected, deleted, restricted or handed to you in a portable format. You can object to processing based on my legitimate interest. Just write to tobsidion@tobiasriemenschneider.com. You can also complain to a data protection authority.

Changes

If this policy changes, the new version will be on this page with a new date at the top.