Last updated: October 2026
Controller
Responsible for data processing within the meaning of the GDPR:
Thore Stadler
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Germany
Email: info@draftply.com
(See also the Legal Notice.)
In short
draftply is a local, offline calculator app. It does not collect, transmit, or share your data. Everything you type, your documents, and your settings stay on your device. The app contains no analytics, no tracking, and no servers that receive your content. This website uses only privacy-friendly, anonymous audience measurement and offers an optional feedback form — both described under This website below.
Data processed by the app
- Your documents and calculations are stored only locally on your device (as files you choose and in the app's local storage).
- App settings (theme, language, number format, precision, recalculation mode) are stored locally on your device via the operating system's standard preference storage.
- The app contains no advertising, no analytics SDKs, and no crash/usage tracking, and it does not create a user account.
- The app talks to no server of ours — we operate none. On the versions distributed through an app store (iOS, macOS, Android, and the Windows Store edition), the store's own purchase framework contacts that store when the app starts, to load the current price and, where applicable, your license status. That exchange takes place between your device and the store provider and carries none of your documents, calculations, or settings. The Linux version has no purchase framework at all and connects nowhere.
- Apart from that, a connection only occurs when you tap an external link (e.g. to this website), which opens in your browser; from that point your browser's and the target site's privacy terms apply.
We therefore do not receive any personal data from your use of the app.
In-app purchases (draftply Pro & optional tips)
The optional "draftply Pro" purchase (on Apple devices also the free 7-day trial, which is started as a free in-app purchase), as well as optional one-time "tip" purchases to support development, are processed entirely by the respective app store (Apple App Store, Google Play or Microsoft Store). Payment and account data are handled by the store provider, not by us — we receive no payment details. Please refer to the store providers' privacy policies:
- Apple: https://www.apple.com/legal/privacy/
- Google: https://policies.google.com/privacy
- Microsoft: https://privacy.microsoft.com/privacystatement
This website
When you visit this website, the hosting provider may automatically process technical access data (e.g. IP address, browser type, date and time of the request) in server log files to deliver and secure the site. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in secure, functional hosting).
Hosting provider: Felix Gassan Realtox Media, Talweg 4s, 21149 Hamburg, Germany.
Web analytics / audience measurement
This website uses self-hosted, privacy-friendly analytics software. Its sole purpose is to understand how this website is used on a statistical basis and to improve our content. No data is shared with third parties, nothing is sold, and all processing happens entirely on our own infrastructure.
No cookies are set and no information is stored in your browser (e.g. local storage). There is no cross-device or cross-site tracking and no fingerprinting. No personal profiles are created.
Data processed per page view:
- the page you visited (stored as a non-reversible hash of the URL) together with the date and time,
- campaign parameters from the link (UTM parameters), where present,
- the host name of the site you arrived from (the domain only, never the full address), where present,
- for an address that does not exist (error page 404), the address you requested, so that broken links can be found and fixed,
- how far down the page you scrolled, in four steps (25 %, 50 %, 75 % and 100 %), so that we can see which parts of a page are actually read.
Handling of your IP address: Your IP address is not stored. It is used only briefly, in memory, to compute an anonymous checksum (SHA-256 hash) from your IP address combined with the current date and a secret random value. This value allows repeat views to be counted within a single day, cannot be traced back to your IP address, and changes every day. Recognition beyond a single day is therefore impossible.
Your browser identifier (user agent) is evaluated only momentarily to detect automated access (bots) and is not stored.
Retention: Scroll data is automatically deleted after 90 days, campaign parameters after 365 days. The plain view counters are kept longer term; they contain no personal data.
Legal basis: Processing is based on our legitimate interest in privacy-preserving, anonymous audience measurement (Art. 6 (1)(f) GDPR). As no personal data is stored, subsequent attribution to an individual is not possible.
Feedback form
The page Report a bug or request a feature lets you send us a message. Using it is voluntary. The form talks only to this website's own server; no external service, CAPTCHA provider or cookie is involved.
What we receive and store:
- the text of your message and the type you chose (bug or feature request),
- optionally the platform, the app version and an e-mail address, if you fill them in (the e-mail address is only used to answer you),
- the time of receipt, to the minute.
We do not store your IP address or your browser details.
Housekeeping trigger: Every page of this website sends one empty request to our own server, which only checks whether routine housekeeping is due (deleting copies of messages after 30 days). Nothing is transmitted with it and nothing is stored; like any request, it appears in the hosting provider's server log described above.
Spam protection: Your browser solves a small computational puzzle in the background; the server accepts each puzzle only once and only within a limited time. To limit the number of messages per sender and day, your IP address is used only briefly, in memory, to compute a salted checksum (HMAC-SHA-256) that changes every day. This checksum cannot be traced back to your IP address. It is kept in a small counter file together with the times of your recent messages and deleted within two days. Nothing else is derived from it. The same kind of counter protects the non-public part of our server against guessing; it is created only when someone tries to log in there and is deleted within two days.
Storage: Messages are saved as files on our web server, outside the publicly reachable directory, and only we can read them. The server's copy is deleted 30 days after receipt at the latest. Please do not include passwords, personal data or whole documents in your message.
Link from the app: If you open the form from the app (Settings → About), the link carries the platform and the app version, which only pre-fill the matching fields of the form in your browser. As with any page request, they appear in the hosting provider's server log.
Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in receiving and processing bug reports and suggestions and in keeping the form and our server free of abuse). For the optional e-mail address, Art. 6 (1)(a) GDPR (your consent by entering it; you can withdraw it at any time by e-mail, with effect for the future).
Your rights under the GDPR
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object (Art. 21). You may also lodge a complaint with a supervisory authority. To exercise these rights, contact: info@draftply.com.
Note: because the app keeps your data only on your device, you control it directly — uninstalling the app or deleting your files removes the data.
Changes
We may update this policy as the app evolves. The current version is always available here.