Privacy Policy

1. Data Controller

The party responsible for this website and this privacy policy is:

Nicolas Meibohm
Alte Str. 9, 38173 Veltheim, Germany
[email protected]

2. This Website

tagwerk.pro is a website that shows what Tagwerk does and takes sign-ups for the beta of the app. It does not measure the app itself, only visits to this website.

This website is hosted on Cloudflare Pages, operated by Cloudflare, Inc., acting as a data processor under Standard Contractual Clauses. Cloudflare processes standard technical server logs (e.g. IP address, timestamp, requested URL) to deliver the site, within the EU where Cloudflare's infrastructure allows it.

This website uses PostHog EU (PostHog Inc., acting as a data processor under Standard Contractual Clauses, EU Cloud region, servers in Frankfurt, Germany) for anonymous, cookieless analytics: which pages are opened and which buttons are clicked, without building a personal profile of visitors and without setting any cookies. The IP address of your device is not stored (`ip: false`). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in understanding how the site is used). Because no cookies are set and no personal profiles are built, no cookie banner is required. A separate Do-Not-Track opt-out is not offered because there is nothing to opt out of: no cookie or identifier is ever stored in your browser.

These anonymous analytics events are kept in PostHog without a fixed automatic deletion schedule, there is no technical trigger that removes them after a set period. They are deleted if and when the PostHog project itself is deleted.

This website has no newsletter signup and no contact form. The only form is the beta sign-up described in section 3.

3. Beta Sign-up

Purpose. If you sign up for the Tagwerk beta, we use your first name and the email address of your Apple ID only to invite you to the test version through Apple's TestFlight. Signing up is voluntary.

Data. Your first name, your email address, the time of your sign-up and the version of this privacy policy you agreed to. We do not set cookies for this and add no personal data to the anonymous analytics event that counts the sign-up.

Storage and notification. The data is stored in a Cloudflare D1 database in the EU (Cloudflare, Inc., acting as a data processor under Standard Contractual Clauses). Each sign-up also triggers a notification email to the operator. It is sent through Cloudflare and arrives through Cloudflare Email Routing in the operator's own mailbox, which is hosted by Google.

Disclosure to Apple. When we invite you, your email address is passed to Apple (Apple Inc., USA, certified under the EU-US Data Privacy Framework), which sends the invitation and runs TestFlight under its own privacy policy. Apart from that, your data is not passed on.

Deletion. We delete your sign-up 180 days after you submit it, or earlier on request. Copies of the notification email in the operator's mailbox are deleted within the same period, and so is your entry in the TestFlight tester list (both by hand, the tester list is also cleared when the beta ends). Write to [email protected]

Legal basis and withdrawal. Your consent, Art. 6(1)(a) GDPR, given by ticking the box next to the sign-up. Processing before a withdrawal stays lawful. You can withdraw your consent at any time with effect for the future. Write to [email protected]

4. The Tagwerk App

The following describes the Tagwerk macOS app itself, which does not send any data to the developer.

5. What Tagwerk Does

Tagwerk is a calendar application for the Mac. It shows several Google calendars, the Apple Calendar, Apple Reminders, and birthdays from Apple Contacts in one view, and can create a Google Meet link when you add an event.

Tagwerk runs entirely locally on your Mac. There is no server operated by the developer, no cloud database, no analytics, no crash reporting, and no tracking in the app. The developer never receives access to your events, contacts, reminders, or any other data.

6. What Data Is Processed Where

Google Calendar (OAuth). When you connect a Google account in Tagwerk, the app accesses your calendar through the Google Calendar API on your behalf: reading, creating, editing, and deleting events, and creating Google Meet conferences. The access and refresh tokens needed for this are stored in the macOS Keychain on your own Mac, not on a server operated by the developer. When you disconnect an account, Tagwerk deletes the tokens from your Mac's Keychain and revokes the access at Google.

Google Contacts (guest search). When you add guests to an event, Tagwerk can search your Google Contacts by name to suggest email addresses. Results are shown only while you are editing the event, held in memory, and never stored by Tagwerk.

Apple data on your Mac. Tagwerk uses the system frameworks EventKit and Contacts to read your Apple Calendar, Apple Reminders, and birthdays from Apple Contacts. This data never leaves your Mac and is not transmitted to the developer or any third party.

Local error log. Tagwerk keeps a log file on your Mac with timestamps and error messages. This file stays on your Mac, Tagwerk never sends it anywhere.

Settings. Your settings are stored locally on your Mac.

7. Google API Services User Data Policy

Tagwerk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Tagwerk uses data obtained through the Google Calendar API only to provide the calendar features described above, does not sell it, does not use it for advertising, and does not share it with third parties.

8. Your Rights

Because Tagwerk runs locally on your Mac and the developer has no access to your data, most data subject rights concern processing carried out by Google or by Apple, not by the developer. You can exercise these rights directly with Google, at myaccount.google.com/permissions, or through your Mac's System Settings under Privacy and Security.

For the data from the beta sign-up, the developer is the responsible party: you can ask for access, correction, deletion, restriction of processing or a copy of your data, and you can object to the processing, at any time. Write to [email protected]

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for the website operator is the Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany, lfd.niedersachsen.de.

9. Contact

For questions about this website or the Tagwerk app: [email protected]