Privacy Policy

Last updated: June 18, 2026

1. Data Controller

Responsible for data processing on this website:

Stefan Lohmaier
Weitlstr. 103
80935 München
Germany
Email: admin@slohmaier.de

A data protection officer has not been appointed. There is no obligation to appoint one under Art. 37 GDPR or § 38 BDSG, as fewer than 20 persons are permanently engaged in the automated processing of personal data.

2. Data Collection and Processing

2.1 Server Log Files

When you visit this website, our hosting provider 1blu (1blu GmbH, Riedemannweg 60, 13627 Berlin, Germany) automatically collects and stores information in server log files. This information includes:

• Browser type and version
• Operating system
• Referrer URL (previously visited page)
• Hostname of accessing computer
• IP address
• Date and time of access

This data is collected for technical reasons and to ensure the security and stability of the service. This data is not merged with other data sources. The legal basis for this processing is Art. 6 (1) lit. f GDPR (legitimate interests). Log files are retained only as long as necessary for these purposes and are deleted regularly, as a rule within a few days. 1blu acts as a processor on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

2.2 Contact by Email

This website does not use a contact form. The contact page only provides email addresses (mailto: links). When you write to us, the data you include — typically your name, your email address, and the content of your message — is processed solely to handle your inquiry.

The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in responding to inquiries) and, where the inquiry concerns a contract or pre-contractual measures, Art. 6 (1) lit. b GDPR. Your data is deleted once your inquiry has been dealt with, unless statutory retention obligations or legitimate reasons require longer storage.

2.3 Cookies and Local Storage

This website sets no cookies at all — neither technically necessary ones nor cookies for analytics, tracking, or marketing.

The only information stored on your device is your theme preference (light or dark mode), kept in your browser’s local storage under the key theme. It stays on your device, is never transmitted to any server, and is read only to display the site in the appearance you selected. Storing it is strictly necessary to provide the display setting you explicitly requested and is therefore exempt from consent under § 25 (2) no. 2 of the German TDDDG. Your language is taken from the page URL (for example /en/ or /de/) and is not stored anywhere.

Because this website uses no non-essential — in fact no — cookies, it shows no cookie consent banner. Consent under § 25 (1) TDDDG and Art. 6 (1) lit. a GDPR is required only for storing or accessing information that is not strictly necessary, and no such storage or access takes place here.

You can delete the stored theme preference at any time through your browser settings.

2.4 Support Requests (Helpdesk)

When you contact our support address, your message is processed in our self-hosted helpdesk system FreeScout, which runs on our 1blu hosting in Germany. No support data is transmitted to the FreeScout developers or any other third party. The following data is processed:

• Your name and email address
• The content of your message and any attachments
• Metadata such as the date and time of the request

Purpose: receiving, processing, and documenting support requests. Legal basis: Art. 6 (1) lit. b GDPR (pre-contractual or contractual measures) where the request concerns one of our products, and Art. 6 (1) lit. f GDPR (legitimate interest in handling inquiries efficiently) in all other cases. Retention: support tickets are deleted or anonymized no later than 24 months after the request has been closed, unless statutory retention obligations require longer storage.

3. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right to access (Art. 15 GDPR): You have the right to obtain confirmation as to whether personal data concerning you is being processed and, if so, to access this data.
• Right to rectification (Art. 16 GDPR): You have the right to request correction of inaccurate personal data.
• Right to erasure (Art. 17 GDPR): You have the right to request deletion of your personal data under certain circumstances.
• Right to restriction of processing (Art. 18 GDPR): You have the right to request restriction of processing under certain circumstances.
• Right to data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used format.
• Right to object (Art. 21 GDPR): You have the right to object to processing of your personal data based on legitimate interests.
• Right to withdraw consent (Art. 7 (3) GDPR): If processing is based on consent, you can withdraw this consent at any time.

To exercise these rights, please contact us at admin@slohmaier.de.

No automated decision-making: We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

4. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that processing of your personal data violates data protection laws. The competent supervisory authority in Bavaria, Germany is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: www.lda.bayern.de

5. Data Security

This website uses HTTPS encryption to protect the content transmitted between your browser and the server. You can recognize an encrypted connection by the “https://” prefix in your browser’s address bar and the lock icon.

6. Product Licensing (lic.slohmaier.com)

This section applies to our desktop products (ControlNav, MouseCross, BrailleKit), not to this website.

When you activate a paid product license, the application contacts our licensing server at lic.slohmaier.com and the following data is stored:

• License key
• Customer email address (received from Lemon Squeezy)
• Order ID and product name
• Per activated device: a SHA-256 device-identifier hash, the device hostname, the last IP address, and activation/validation timestamps

During activation, the device hostname is also forwarded to Lemon Squeezy (USA) as the activation’s instance name.

Purpose: validating the license, enforcing the per-device activation limit, and preventing license abuse.

Legal basis: Art. 6 (1) lit. b GDPR (performance of the licence contract) and Art. 6 (1) lit. f GDPR (legitimate interest in enforcing activation limits and preventing abuse).

Free trial: The evaluation period is fully local. No data is sent to the licensing server during the trial; there is no trial server endpoint.

Hosting: The licensing database is hosted by 1blu (1blu GmbH, Germany), which acts as a processor on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

Retention: When a device is deactivated, its activation data is deleted. In addition, IP addresses are removed after 90 days, activations that have not been validated for about 18 months are deleted automatically, and the email address of a cancelled or expired license is anonymized after about 12 months. The remaining license data is kept for as long as needed to operate your license. You may request erasure of your data at any time (Art. 17 GDPR).

Self-service: License holders can view and reset their activations at any time via the self-service portal at https://lic.slohmaier.com/portal.

The detailed per-product privacy policy is linked from each product page.

7. Third-Party Services

This website uses the following third-party services:

• GitHub API (api.github.com): The Open Source page fetches publicly available repository metadata (name, description, stars, forks, last update) from the GitHub API at build time on our server. No request is made from your browser to GitHub when you visit the page. No personal data is transmitted.

• Lemon Squeezy: Lemon Squeezy is the active payment platform and Merchant of Record for purchases of our products. It is operated by a US-based company, and payment data is processed in the United States. Lemon Squeezy acts as a separate, independent controller for the billing and payment process. Their privacy policy applies: https://www.lemonsqueezy.com/privacy. The Lemon Squeezy checkout script (assets.lemonsqueezy.com) is only loaded when you actively initiate a purchase.

Fonts

All fonts used on this website (Manrope, Roboto Slab) are self-hosted — the font files are served directly from slohmaier.com. No connection to Google Fonts or any other external font CDN is made when you visit this site.

8. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We encourage you to review this page periodically for the latest information.

9. Contact

If you have questions about this privacy policy or data processing, please contact:

Stefan Lohmaier
Email: admin@slohmaier.de