Privacy Policy — GroundDeck

Last updated 4 November 2026

Good-faith document, not legal advice. This text is a starting point written by the operator and will be reviewed by counsel before GroundDeck serves the public at scale. It says what it is.

Who is responsible

Thorsten Meyer, Blombergstrasse 11 C, 82393 Iffeldorf, Germany. Email: contact@grounddeck.com. Details on the Impressum.

This website (grounddeck.com)

This site is static. It sets no cookies and loads nothing from third-party servers: fonts and styles are served from this domain. The only request to another host is the cookieless analytics request described in the next section. Our hosting provider records standard server logs (IP address, requested page, timestamp, user agent) to operate the server securely. Those logs are kept for a short period and then deleted.

Web analytics (Grynlume)

Grynlume is a self-hosted analytics tool operated by Thorsten Meyer on his own server in Germany. It counts visits, pages, sources and devices without cookies and without storing anything in your browser.

When you open a page, your browser sends the page address, the referring page, your browser type, your screen width and your IP address to that server (grynlume.grimfaste.com). The IP address and browser type are combined with a random secret that changes every day and are stored only as a hash; the raw IP address is never written to disk. Each daily secret is deleted after the following day, so you cannot be recognised from one day to the next or across other websites. How far you scroll and how long a page is actively open are stored as figures on that page view, not as a browsing history. A click on an outbound link or a file download is recorded the same way.

To keep automated traffic out of the statistics, user-agent strings and the host names of referring websites are sent to TypeSafe (typesafe.ai), whose service classifies them. No IP address and no identifier is sent with them.

Requests to the analytics server pass through Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, which routes traffic to the server and provides DDoS protection. Cloudflare processes connection data (including your IP address) in transit on our behalf under a data-processing agreement; transfers to the USA are covered by the EU–US Data Privacy Framework and standard contractual clauses.

Statistics are kept for 14 months (at the latest until the end of the following calendar month); aggregated counts without any visitor identifier are kept indefinitely. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in understanding which content is read. You may object at any time by writing to contact@grounddeck.com.

Email

If you email us, we keep the message and your address for as long as needed to answer you and to document the exchange. We do not add you to any list.

The GroundDeck service (private preview)

What we store

When you create a GroundDeck account we store your email address and a salted, hashed password. We store the projects you create, the app versions GroundDeck generates, the links you publish, and a usage ledger (token counts and estimated cost per generation) used to enforce limits.

AI generation

Your prompts and the current app are sent to a third-party language model provider to generate or refine an app. We do not use your data to train models. The provider processes it to return a result and under its own terms.

Data your published apps collect

Apps you publish can collect data from their visitors, for example email addresses on a waitlist. That data is stored by GroundDeck on your behalf, and you are the controller of it. You are responsible for telling your visitors what you collect and why, and for honouring their requests to access or delete it. You can view and erase this data from your project at any time.

What we do not do

We do not sell your data. We do not use it to train models. We do not share it except as needed to run the service.

Your rights

Under the GDPR you have the right to access, rectify, erase and port your data, to restrict or object to processing, and to lodge a complaint with a supervisory authority. You can delete your GroundDeck account yourself, which permanently removes your projects, published apps and the data they collected. For anything else, email contact@grounddeck.com.