Privacy policy

Controller

Jonathan Uhlemann, Matthias Bigl, Ferdinand Rubenbauer (civil-law partnership (GesbR) under Austrian law), Vienna, Austria
Email: mail@jonathanuhlemann.de, mail@bigls.net

This website

We measure how the public pages of this website are used with PostHog (see the next section). Fonts and scripts of the pages themselves are served from our own server; the measurement script is loaded from PostHog, and no other third-party content is embedded. We use no advertising cookies and no tracking across several websites.

Audience measurement with PostHog

We measure use of the public pages with PostHog (PostHog, Inc.; data centre in Frankfurt, Germany): page views, origin (referrer, UTM parameters), clicks, load times (web vitals), click and scroll heatmaps, browser and device type, and the approximate location derived from the IP address; the IP address itself is not stored. No person profiles are created, sessions are not recorded and no surveys are shown. For this, PostHog sets a cookie and an entry in your browser’s local storage (key “ph_…”, specifically “ph_<project token>_posthog”, holding a random identifier; lifetime 365 days). The cookie applies to the whole domain so that we can follow the path from this website to sign-in in the Piloti application as one. If your browser sends “Do Not Track”, we measure nothing. The data is kept for up to 12 months. PostHog processes it on our behalf (Art. 28 GDPR); as a US group, PostHog, Inc. may access it from the US, based on the EU-US Data Privacy Framework and standard contractual clauses. The legal basis is our legitimate interest in improving the website (Art. 6(1)(f) GDPR); for storage on your device, § 165(3) TKG 2021 applies. You may object to the measurement at any time by email.

Hosting and server logs

The website is hosted by XPAX GmbH (IPAX), Austria. When you visit it, technically necessary connection data (IP address, time, page requested) is processed to keep the website running and secure. To protect against abuse we briefly count requests per IP address (rate limiting). The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). This data is not merged with other data sources.

Redirect from www.piloti.at

Requests to www.piloti.at are redirected to piloti.at by Cloudflare, Inc. (USA), which processes your IP address in doing so. Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). If you open piloti.at directly, Cloudflare is not involved.

Contacting us by email

If you write to us, we process the data you send (name, email address, content of your enquiry) to answer it (Art. 6(1)(b) GDPR, or (f) for general enquiries). Your message arrives in the founders’ mailboxes and is stored by their email providers. We delete it once it is no longer needed and no statutory retention period applies.

Sign-in and the Piloti application

“Sign in” takes you from this website to the Piloti application, which has its own privacy policy. In short: sign-in is handled by WorkOS, Inc. (USA). AI requests are routed through OpenRouter, Inc. (USA) to model providers that may be based outside the EU. Product analytics, error tracking, surveys and support in the application run through PostHog (data centre in Frankfurt, Germany). We do not train AI models on your data.

Editorial area

/keystatic is the editorial area where we write blog posts. It is not meant for visitors. Opening it loads services from Keystatic Cloud (Thinkmill), GitHub and Google Fonts, and uses cookies and local storage for sign-in.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection; just email us. You may also lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, dsb.gv.at).

Last updated: September 2026