Privacy policy
How this website processes preferences, messages and technical connection data.
Controller
Josef Lehner, Hohlweggasse 23, 1030 Vienna, Austria. Contact via the contact form.
Hosting and server logs
The hosting provider is World4You Internet Services GmbH, Wolfgang-Pauli-Straße 2, BT3, 4020 Linz, Austria. Technical server logs may process IP addresses, timestamps, requested files, browser information and response status. The purposes are secure delivery, troubleshooting and prevention of misuse, based on Article 6(1)(f) GDPR. Actual retention depends on the hosting configuration.
Preferences and cookies
The light/dark theme and font size are stored locally in your browser as dogtruck-theme and dogtruck-scale. You can remove them by clearing website data. Language is part of the page URL. There is no individual visitor profiling, advertising or externally loaded fonts.
The contact form sets a technically necessary session cookie. A security token and arithmetic question are temporarily associated with the server-side session to protect against unintended cross-site submissions. Form values are not stored in the session.
Contact form and PDF attachment
Your name, reply address, message and optional PDF of up to 10 MB are sent to the website operator by email to handle your enquiry. No contact database is maintained; temporary upload files are removed after the request. Depending on the enquiry, processing is based on Article 6(1)(b) or (f) GDPR. Messages are deleted when processing is complete unless retention duties or legitimate reasons require otherwise.
The checkbox acknowledges this policy and is not consent to advertising. The hosting and respective email providers participate in delivery and replies.
Protection against misuse
Detected security violations are logged with IP address, timestamp, event type, affected route and blocking result. Events are removed after seven days. Definite attacks and repeated violations can trigger a permanent IP block that can be lifted administratively. IP addresses and timestamps of all form submission attempts, including invalid attempts, are used for ten minutes to limit repeated submissions. These temporary limits do not permanently block visitors for form errors. Ordinary text, typos and unknown pages do not by themselves cause a block. Processing is based on the legitimate interest in secure operation under Article 6(1)(f) GDPR.
External links
External services are accessed only when you follow a link. Their providers are responsible for subsequent processing. No third-party content is embedded automatically.
Your rights
Subject to legal requirements, rights include access, rectification, erasure, restriction, portability and objection. Consent can be withdrawn for the future. Send requests through the contact form. You can also complain to the Austrian Data Protection Authority.
Data security
The public website should be served over HTTPS. Complete protection of internet data transmission cannot be guaranteed. This policy is updated when functionality or hosting changes.
Version checks for downloads
On the first visit to the downloads page from the start of a month, the web server requests public release information for the listed programs from GitHub. An initial check takes place on first use. GitHub receives the server's IP address; visitor IP addresses, search terms and form data are not forwarded. Results are cached on the server to avoid repeated requests during the same month. The purpose is to provide matching version information and download links.
Program bug reports
The contact form also processes your selected topic. For “Report a program bug”, you may voluntarily provide the program name, version and operating system including its version. A download link can prefill the program and version using URL parameters; these remain editable. URL parameters may appear in browser history and hosting access logs. Following such a link does not automatically send a message.
We use these details, voluntary error descriptions, log excerpts and PDF attachments to reproduce, investigate and fix the reported issue and to respond to your enquiry. Bug handling is based on Article 6(1)(f) GDPR: our legitimate interest in maintaining functional programs and responding to feedback. Technical details are optional. The contact form cannot be processed without a name, email address, message and the required security information.
Please remove other people’s personal data, passwords and confidential content from messages and attachments. Reports are not automatically published on GitHub or this website. Technical details follow the same confirmation and delivery process and retention criteria as the message.
Confirmation and email checks
To prevent misuse, we check the email domain through DNS and compare the address or domain with a local disposable-provider list and our own blocklist. DNS queries transmit the domain through DNS infrastructure, not the full address or message. No external CAPTCHA service is used. These checks are based on Article 6(1)(f) GDPR and our legitimate interest in preventing abusive submissions.
Initially, a confirmation email is sent to the supplied address. Form details, language and any PDF with its filename are held in protected server storage. The random confirmation link expires after 30 minutes. Only the additional “Confirm message now” action forwards the message to the operator. Failure to confirm does not automatically cause a permanent block.
After successful delivery, the pending form and PDF contents are removed. A technical status without form contents prevents repeat delivery until expiry. Expired records are removed on the next contact request; the supplied cleanup program may additionally be scheduled by the hosting service. Without such a request or scheduled run, physical deletion does not occur exactly at the end of the 30 minutes. Email copies held by the operator follow the retention criteria described above.
To limit repeated sending, the IP address, timestamp and SHA-256 hash of the normalised email address are considered within a rolling ten-minute window; older entries are removed on the next relevant submission attempt. Hashing does not establish anonymisation. Our blocklist holds blocked email addresses or domains until administrative removal; the continued need for blocking must be reviewed regularly. These lists are not automatically published.
Imported server statistics
The header displays imported monthly server totals, a previous-month comparison and, where available, the most requested page. Published values are aggregate counts including automated requests, without individual IP addresses or visitor profiles. This display sets no additional tracking cookie and does not itself record visits. Its source may be the hosting access records described under “Hosting and server logs”.
Last updated: 11 October 2026