Legal
Privacy
For the website at buoya.app. The buoya app has its own statement. Diese Seite auf Deutsch – that version is the one written for German law, and it governs where the two differ.
Who is responsible
Niklas Wegner
Langer Segen 15
24105 Kiel
Deutschland
Email: [email protected]
The short version
This website sets no cookies, counts no visits and embeds nothing from anyone else – no analytics, no maps, no videos, no social buttons. The fonts are served from this site, not fetched from a font service. There is no consent banner because there is nothing to consent to.
What a page request leaves behind
Asking for a page sends the server what it needs to answer: your IP address, the date and time, the address you asked for, the status of the reply, how much was transferred, and the name your browser and operating system give. A page cannot be delivered without them.
They are used to deliver the page and to keep it available – fending off attacks, for instance. Under the GDPR the basis is Art. 6(1)(f), the legitimate interest in a site that stays reachable. We keep no logs of our own and combine these data with nothing.
How long Cloudflare keeps those logs is Cloudflare's own retention, on its own terms. No copy reaches us and we do not request one. In the Cloudflare account we see counts – how many pages were served – and not who asked for them.
Hosting
The site runs on Cloudflare Pages, a service of Cloudflare, Inc., San Francisco, USA. Cloudflare processes the data above on our behalf under a data processing agreement (Art. 28 GDPR). Cloudflare runs a worldwide network, so processing in the United States is not ruled out; the basis for that is the European Commission's standard contractual clauses (Art. 46 GDPR) and Cloudflare's certification under the EU–US Data Privacy Framework.
Fonts
“Bricolage Grotesque” and “Instrument Sans” sit on the same server as the page and are delivered with it. There is no connection to Google Fonts or any other font service, so your IP address goes to none of them.
If you write to us, we process your address and your message in order to answer – Art. 6(1)(b) or (f) GDPR. The message stays while the matter is open and for as long as a retention period applies, then it is deleted. The mailbox runs on Google (Gmail), so Google processes the message too.
Search and the calculators
The search runs entirely in your browser. It downloads an index that is built with the site and sits on the same server, and searches it on your device. What you type does not leave the browser and does not appear in the address bar. Which parts of that index your browser fetches is, like any other request, in the host's logs – see above.
The same holds for the four calculators under “Tools”: mast height, anchoring rules, use tax and visiting from abroad. They have input fields but no destination – what you enter stays on the device, is sent nowhere and stored nowhere. Without JavaScript they do not appear at all, and the page stays fully readable.
The app
What the buoya app processes on your phone – position, trips, charts – is not covered here but in its own statement at privacy.buoya.app and in the app itself. This website knows nothing of it: it loads nothing from the app and sends nothing to it.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object to processing based on a legitimate interest (Art. 21). A message to the address above is enough.
You may also complain to a data protection authority (Art. 77 GDPR). Ours is the Independent Centre for Privacy Protection Schleswig-Holstein (ULD) in Kiel, Germany.
Changes
When the website changes, this statement changes with it. The version that applies is the one standing here.
As of 21. Oktober 2026 · Legal notice · Deutsch