Privacy policy

This policy describes which personal data is processed when you visit pk910.de. In short: no cookies, no tracking, no analytics and no third-party content. Fonts and all other files come from this site's own server.

1. Controller

Email:

No data protection officer is appointed or required.

2. Server log files

For every page or file requested, the web server (Apache) logs the IP address, date and time, the requested address, the HTTP status code, the amount of data sent, the referring page and the browser's user agent. This includes requests another website makes to the endpoints under /api/.

The purpose is delivering the site, keeping the server secure (defending against attacks and abuse) and finding errors. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is a secure, working service. Logs are deleted automatically after 14 days, unless an incident has to be investigated, in which case they are kept until it is resolved.

The site runs on a server operated by the controller. Connections are encrypted with TLS.

3. Live data on the front page

The GitHub and beacon chain statistics are fetched and cached by this site's own server (from GitHub, beaconcha.in and ephemery.dev). Your browser only talks to pk910.de, and no data about you is passed to those services.

4. Storage in your browser

Without you doing anything, the front page stores nothing on your device. The site only stores:

• theme in localStorage when you switch the colour scheme, so it is kept for your next visit.
• When you open the terminal (or land on a missing page, which starts it by itself): the IndexedDB databases pk910-vfs (your changes to the terminal's file system, including shell history) and pk910-assets (cached program files). The browser is asked to keep this data.

This data stays on your device and is never sent to the server. Storing it is strictly necessary for the function you use (§ 25(2) no. 2 TDDDG). You can delete it at any time in your browser's site data settings.

5. Networking in the terminal

The terminal has no outside connection until you explicitly run enable-network in it. Your browser then opens a WebSocket connection to a public relay run by a third party (relay.widgetry.org by default). Its operator sees your IP address, your user agent and all of the terminal's network traffic (unencrypted content in full; for HTTPS only destinations and connection metadata). The controller has no influence on that service; the connection exists only because you asked for it. Servers you reach from the terminal see the relay's IP address, not yours.

enable-network --internal connects to a tunnel on pk910.de instead, which needs credentials. Failed logins are logged with IP address and user name (Art. 6(1)(f) GDPR, preventing abuse).

6. Links

Links to other websites (GitHub, X, Telegram, Discord and others) are only followed when you click them. From then on, the privacy policy of that provider applies.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) (Art. 21). An email to the address above is enough. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state where you live.

There is no automated decision-making or profiling.

Last updated: October 2026