Privacy Policy
As of: May 2026
Welcome to Ablagio. Protecting your personal data is very important to us. Below, we explain how we process your data when you use our website and our app.
Data Controller
The data controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Hosting & Infrastructure (Cloudflare)
We host our website and app with Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). To deliver content and defend against cyberattacks (e.g. DDoS protection), Cloudflare processes technical connection data (IP address, browser information).
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in the secure and stable provision of the website.
A Data Processing Agreement (DPA) has been concluded with Cloudflare in accordance with Art. 28 GDPR.
Waitlist & Beta Access (Supabase)
If you sign up for our waitlist or request access to the beta version, your email address will be stored in a database maintained by Supabase Inc. The database is operated in the EU (Frankfurt/Ireland) region.
Legal basis: Art. 6(1)(a) GDPR — consent. You may withdraw your consent at any time with future effect, e.g. by emailing hallo@ablagio.de.
Email Dispatch (MailerLite)
We use MailerLite (MailerLite Limited, Paupio g. 46, 11341 Vilnius, Lithuania) to send confirmations (e.g. double opt-in) and notifications related to the waitlist or beta access. MailerLite processes your email address exclusively on our behalf.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract / pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in technically sound and efficient communication).
A Data Processing Agreement (DPA) has been concluded with MailerLite in accordance with Art. 28 GDPR.
AI-Powered Sorting (Mistral AI)
When you use the sorting feature at /app/sort, the analysis is performed by Mistral AI (Mistral AI SAS, 15 Rue des Halles, 75001 Paris, France).
- Only the filenames of the selected folders are transmitted — file contents never leave your local computer.
- Mistral uses the data solely to generate the sorting suggestion and does not use it to train AI models.
- Mistral stores audit logs for a maximum of 30 days. Server location: within the EU.
Legal basis: Art. 6(1)(b) GDPR — performance of a contract.
Cookies & Local Storage
- Functional cookie "ablagio_access": Technically necessary to grant access to the protected beta area. Duration: 30 days. Legal basis: Section 25(2)(2) TDDDG (absolutely necessary).
- No tracking cookies — we do not use cookies for marketing or advertising purposes.
Analytics (Plausible)
For the statistical analysis of visitor numbers, we use Plausible Analytics (Plausible Insights OÜ, Tallinn, Estonia). Plausible operates entirely without cookies and does not store any personal data. There is no cross-page tracking. A cookie banner is not required for this.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in measuring reach without infringing on privacy.
Your Rights
- Access (Art. 15 GDPR): What data do we store about you?
- Rectification (Art. 16 GDPR): Correction of inaccurate data.
- Erasure (Art. 17 GDPR): Right to be forgotten.
- Objection (Art. 21 GDPR): Against processing based on legitimate interests.
- Data portability (Art. 20 GDPR).
Contact: hallo@ablagio.de. You also have the right to lodge a complaint with a data protection supervisory authority.