Privacy

In brief

This website is deliberately data-minimal: it uses no cookies and loads no fonts from third-party servers. All content is served statically. For anonymous audience measurement it uses cookieless web analytics (see below) - no personal profiles are built about you.

Controller

Tossa · Owner: Tolga Sanli, Josef-Neuberger-Str. 2, 40625 Düsseldorf, Germany, hallo@edenfalls.net. See also the legal notice.

Hosting

This website is hosted by Vercel Inc. When the site is accessed, the host processes technically necessary data (e.g. IP address, time of access, page requested) in server logs in order to deliver the website and ensure the security of operation (Art. 6(1)(f) GDPR). This data is not merged with other data sources.

Audience measurement (Vercel Web Analytics)

To determine anonymous usage statistics (e.g. page views, approximate origin, device type), this website uses Vercel Web Analytics, a service of Vercel Inc. The measurement works without cookies and without persistent identifiers: no recognizable profile is built across multiple visits or websites, and no data that directly identifies you is collected. The legal basis is our legitimate interest in a data-minimal analysis of site usage (Art. 6(1)(f) GDPR). More information: vercel.com/docs/analytics/privacy-and-compliance.

Reading progress (own measurement)

On the reading pages, this website anonymously measures up to which point of a chapter people read, in order to improve the chapters editorially. Only the following is collected: the chapter opened, the language version, the first and last visible paragraph, the total number of paragraphs and the active reading time. The measurement works without cookies, without localStorage and without identifiers that outlast the individual page view - individual visits or persons cannot be recognized. The IP address is not part of the stored measurement data. The data is stored with Supabase in the EU region Frankfurt. The legal basis is our legitimate interest in a data-minimal analysis of chapter usage (Art. 6(1)(f) GDPR).

Remember reading spot (optional)

On the reading pages there is a toggle that lets you save your reading spot on your device. Only once you turn it on does the website create entries for this in your browser's local storage (chapter and paragraph). This data stays on your device and is never transmitted to us or third parties. If you turn the feature off, it is deleted immediately (§ 25(2) TDDDG, storage strictly necessary for a function you requested).

Light or dark design

The website follows your device's light or dark setting. If you choose a design yourself with the toggle at the top of the page, your browser keeps that choice in its local storage - only after your click, only on your device, never transmitted to us or third parties. You can delete the entry at any time in your browser settings (§ 25(2) TDDDG, storage strictly necessary for a function you requested).

Chapter reactions

At the end of each chapter you can leave one of four reactions or type a short word of your own (up to 24 characters). A click sends only the chapter, the language version and the chosen reaction or word to our server function, which stores it as an anonymous count with Supabase (EU region Frankfurt). Words you add are shown publicly as a reaction option for other readers; we may remove words that are unlawful or abusive. With the reaction "Lost me" you can optionally add a short note (up to 140 characters) about what lost you; it is stored anonymously with the chapter, is read only by the site operator and is never published. So that you can see, change or withdraw your choice later, the reaction you picked is kept in your browser's local storage - only after your click, only on your device, never transmitted to us; withdrawing the reaction removes the entry (§ 25(2) TDDDG, storage strictly necessary for a function you requested). To prevent automated flooding, the server function derives a salted hash from your IP address with a key that changes daily; the hash is kept for at most 24 hours, is not stored with the reaction and cannot be traced back to you without the key. The legal basis is our legitimate interest in anonymous reader feedback and in protecting the site from misuse (Art. 6(1)(f) GDPR).

Comments

Under each chapter you can post comments without an account. Stored are: the chapter, the language version, the name you enter (optional - otherwise "Anonymous"), the comment text and the time of posting. Comments are public and visible immediately; we may hide or delete comments that are unlawful, abusive or spam. The IP address is not stored with the comment; as with reactions, only a salted, daily changing hash of it is kept for at most 24 hours to limit the number of posts per sender. You can also reply to a comment; replies follow the same rules. Replies marked "Author" are posted by the site operator after signing in to a login reserved for the operator; there are no reader accounts. The data is processed by our server function in the EU (Frankfurt) and stored with Supabase in the EU region Frankfurt. The legal basis is our legitimate interest in operating the comment function you request and in protecting it from misuse (Art. 6(1)(f) GDPR). Because comments are anonymous, we cannot verify who wrote one; if you want a comment removed, email hallo@edenfalls.net, name the chapter and the text, and we will delete it.

Newsletter

Anyone who subscribes to the newsletter transmits their email address to our newsletter provider MailerLite (UAB MailerLite, Vilnius, Lithuania - processing within the EU). Subscription uses the double opt-in procedure: it is active only after confirmation via the link sent to you. The address is used exclusively to send the newsletter (Art. 6(1)(a) GDPR) and is not passed on to third parties. Every issue contains an unsubscribe link; consent can be withdrawn at any time, after which the address is deleted.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a data protection supervisory authority. Informal requests by email to hallo@edenfalls.net are sufficient.