Give&Take privacy – web app and community
Updated: 20 October 2026
The private web app at geben-und-nehmen.rainbow-data.de/app/ and the optional community have different data flows. Updated 20 October 2026.
This translation is for convenience. The German version is the reference text. Deutsch
1. Controller
Andreas Oberacker, Friedrichstr. 71, 76706 Dettenheim, Germany; mobileapp@rainbow-data.de. These notices describe the supplied web-app/community implementation.
2. Private records and files
Loans, contacts, photos and settings stay in the browser's IndexedDB. Language/settings are stored locally; a service worker caches app files for offline use. There is no automatic upload of the private notebook or synchronisation with Android. App-file and push-configuration requests still generate technical web traffic. No login is needed for private records. Selected photos/contacts are processed locally. JSON backups include photos and are not additionally encrypted; calendar exports contain selected appointments. You control saving and sharing files. Archiving is not deletion. Browser/device cleanup can remove local data; protect your backup files.
3. Optional community
When used, the community processes login email, account ID, pseudonym, optional profile details, offers, requests, enquiries, item descriptions, categories, handover/return confirmations and points. Optional public profiles and ranking details may be visible to other users. Only provide necessary information. Random app references can link to community records. Private notebooks are not fully synchronised.
4. Location and maps
The marketplace uses locations and approximate coordinates you choose; published coordinates are rounded to two decimal places. This reduces precision without guaranteeing anonymity. Maps load only after activation. The configured tile provider, by default the OpenStreetMap Foundation, receives your IP address, browser information, referring site and tile requests. GPS is not read automatically. Provider notice: osmfoundation.org/wiki/Privacy_Policy.
5. Optional web push
Push requires operator setup, your activation and browser permission. The server stores a random device ID, authentication proof, push endpoint, random record references and reminder times. It does not receive names, contacts, item titles, notes or photos for reminders. Signals carry no private text payload; the web app builds the notice locally. Apple, Google or Mozilla handle delivery depending on browser and process connection/delivery information under their own terms, potentially outside the EU/EEA. Push is optional; calendar export remains available. Disable it in the app/browser. Offline revocation is retried later. Running server maintenance removes devices not updated for over 90 days.
6. Hosting and sessions
Web servers and hosting providers process IP address, request time, resource and connection information to serve and secure the site. The community uses an essential session cookie; sessions expire after eight inactive hours. Email sign-in links work once and expire after 15 minutes; an email service delivers them. Technical records are limited to the period needed for operation, troubleshooting, security or legally necessary evidence. The supplied implementation embeds no advertising or analytics trackers.
7. Retention and account deletion
Community records remain while required for chosen functions and shared transactions. Deleting an account removes email associations and identifying profile details and closes listings, but does not erase every linked transaction or points record. Erasure requests are assessed against other participants' needs and necessary evidence. Local app data and exported backups must be deleted separately.
8. Legal bases and rights
Essential local/session storage follows section 25(2)(2) TDDDG; optional additional access follows section 25(1). Necessary community processing relies on Article 6(1)(b) GDPR; optional consent-based maps, push and additional public details on (a); necessary security on (f). Consent can be withdrawn prospectively. Subject to legal conditions, access, rectification, erasure, restriction, portability and objection rights apply. You may complain to a supervisory authority, particularly the Baden-Württemberg authority. Contact: mobileapp@rainbow-data.de.
Give&Take privacy – Android