Privacy Policy

Last updated: March 2026 · Pursuant to GDPR (EU 2016/679)

1. Controller

Michel Garand · Schiffbauerstr. 3 · 15299 Müllrose · Germany
Email: stewardship@ubec.network

No Data Protection Officer is required. Contact the controller directly for all privacy matters.

2. Data we collect and why

2.1 Account registration (living-labs.ubec.network)

DataPurposeLegal basis
Email addressAccount identity, login, transactional emailsArt. 6(1)(b) GDPR
Password (bcrypt hash — never plain text)AuthenticationArt. 6(1)(b) GDPR
GDPR consent record (checkbox + timestamp)Compliance documentationArt. 6(1)(c) GDPR
Full name (optional)PersonalisationArt. 6(1)(a) GDPR
Display name (optional)Community identityArt. 6(1)(a) GDPR
Preferred languageInterface localisationArt. 6(1)(b) GDPR
Stellar public key (optional)Token reward distribution via Stellar networkArt. 6(1)(a) GDPR

2.2 Session data

On login: hashed session token, IP address, user-agent string — stored for session duration, deleted on logout or expiry (max 7 days).

2.3 Analytics

Plausible Analytics (self-hosted at analytics.ubec.network) — cookieless, no PII collected, no cross-site tracking, no consent required. Plausible privacy docs →

2.4 Fonts

Bunny Fonts (fonts.bunny.net) — operated by BunnyWay d.o.o., Slovenia (EU). GDPR-compliant alternative to Google Fonts. No IP transferred outside EU. No consent required.

3. Hosting

All personal data stored exclusively on EU infrastructure:
Hetzner Online GmbH · Industriestr. 25 · 91710 Gunzenhausen · Germany (server: Nuremberg, EU)

4. Data retention

Account data: retained for duration of registration; deleted within 30 days of erasure request. Session tokens: deleted on logout or after 7 days. Analytics: 24-month rolling window, aggregated and anonymised.

5. Your rights (GDPR)

Access (Art. 15) · Rectification (Art. 16) · Erasure (Art. 17) · Restriction (Art. 18) · Portability (Art. 20) · Object (Art. 21) · Withdraw consent at any time.
To exercise rights: stewardship@ubec.network

6. Right to complain

Supervisory authority for Brandenburg:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77 · 14532 Kleinmachnow · www.lda.brandenburg.de

7. No third-party tracking

No Google Analytics, Google Fonts, Facebook Pixel, or any advertising/tracking service. No data sold or shared with third parties for commercial purposes.