Datenschutzerklärung / Privacy Policy

1. Controller (Verantwortlicher)

Marc Hartung
Bensberger Marktweg 375A
51069 Köln, Germany
Email: beutel.wahl-3a@icloud.com

2. Data We Collect and Legal Basis

We process the following personal data when you use navius:

• Email address — for account creation, authentication, and password reset (Art. 6(1)(b) GDPR — contract performance).
• Bookmark data (titles, URLs, groups) — to provide cloud sync across your devices (Art. 6(1)(b) GDPR).
• Usage preferences (theme, layout, font size) — stored locally on your device by default; synced to cloud when you use an account (Art. 6(1)(b) GDPR).
• Session cookies (sb-* cookies via Supabase) — required for authenticated sessions (Art. 6(1)(f) GDPR — legitimate interest in providing a functional service).

3. Cookies

navius uses essential session cookies via Supabase (our authentication provider) to keep you signed in. These cookies are set only on authenticated pages (dashboard, account settings). No tracking, analytics, or advertising cookies are used. You can block cookies in your browser settings, but some features may not work.

4. Data Processor

Your data is processed on our behalf by Supabase, Inc (1550 Bryant St, Suite 350, San Francisco, CA 94103, USA). A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded with Supabase. Data is stored on servers in the US and EU (Frankfurt). Supabase is certified under the EU-US Data Privacy Framework.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days. Bookmark data stored only locally on your device is not accessible to us.

6. Your Rights (Art. 15-22 GDPR)

Under the GDPR, you have the following rights:

• Right of access (Art. 15) — request a copy of your data
• Right to rectification (Art. 16) — correct inaccurate data
• Right to erasure (Art. 17) — delete your account and data
• Right to restrict processing (Art. 18)
• Right to data portability (Art. 20) — export your data
• Right to object (Art. 21)

To exercise your rights, contact us at beutel.wahl-3a@icloud.com. You also have the right to lodge a complaint with a supervisory authority (e.g., Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).

7. Data Sharing

We do not sell, trade, or share your personal data with third parties except as necessary to provide the service (Supabase as data processor) or as required by law.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of material changes via the extension or website.