Privacy

Controller

Lars Schlich
Am Südermoor 4
24888 Steinfeld
l.schlich@schlichnet.de

Please get in touch by email only. I do not want to receive letters or visits. The address is only given because the law requires it.

In short

Schematic Tracker works without accounts, cookies, tracking, external fonts or scripts. Only what is needed for it to work is stored.

What is stored on the server

• Your imported lists: name, materials, amounts and the “farmed” status.
• A check value (SHA-256 hash) of the edit key. The key itself is not stored.
• Optional share tokens (view or co-edit) if you share the list with friends.
• If you connect the Minecraft mod: a check value (SHA-256 hash) of the short pairing code, the list it belongs to and when it expires. Codes are valid for 10 minutes and are deleted once redeemed.
• If you choose “I’ll collect this” on a material: the name you entered in the settings. Everyone with the link to the list can see it. A nickname is enough.
• A history of changes (who entered, checked off or took over which amount and when) and a leaderboard with the total of entered blocks per name. Only the last 300 history entries per list are kept.
• While you have a list open: a random session ID, your name from the settings (if set) and the time of the last heartbeat, so others can see who is there. These entries expire after about a minute.
• Time of creation and of the last activity.

Lists are deleted automatically when they have not been opened or edited for 180 days. You can delete a list yourself at any time.

What is stored in your browser

Your browser’s local storage (localStorage, not a cookie) holds “My lists” with the name, ID and edit key of each list, the last opened tab, your settings (language, design, display, name) and, for offline mode, the last loaded state of each list and changes not sent yet. If you install the app, a service worker also stores the app’s program files. This data only leaves your browser when you open or edit a list.

IP addresses and server logs

To prevent abuse, the number of requests per IP address is counted for a short time (at most 24 hours). The hosting provider processes technically necessary connection data such as the IP address in server logs. The legal basis is the legitimate interest in secure operation (Art. 6(1)(f) GDPR).

Hosting: Vercel Inc. (USA). Database: Neon (serverless Postgres), connected via Vercel. Data may also be transferred to the USA.

Your rights

You have the right to access, rectification, erasure and restriction of processing, and the right to lodge a complaint with a data protection authority. As there are no accounts, we can only identify lists if you give us the edit link.