Polityka prywatności jest dostępna w języku angielskim i niemieckim.

Privacy policy

Last updated: November 2026

1. Who is responsible

Stefan Hoffmann
Bachstelzenweg 29
80937 München
Germany
Email: info@stefandj.de
Phone: +49 172 813 28 40

2. The short version

This page gives away Google Play codes for My App. We only process the data needed to make sure everyone gets at most one code and the page runs securely. There’s no sign-up, no tracking, no ads, no analytics and no fonts or scripts from other servers.

3. Hosting and server logs

The page is hosted by Server4You GmbH, Hessen-Homburg-Platz 1, 63452 Hanau, Deutschland. When your browser opens the page, it technically has to send data to the server: IP address, date and time, the address requested, amount of data transferred, browser and operating system, and the previously visited page (referrer). The hosting provider stores this in server log files to keep the page running securely and to fend off attacks.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure and stable service. The log files are deleted automatically after a short time. The hosting provider processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

4. Handing out codes

When you tap “Get my code”, we store in our database:

which code was handed out and when,
a hash of the random identifier from the gpc_claim cookie (see 5). This lets us recognise your browser and show you your code again,
a pseudonymised identifier of your internet connection. We create it by hashing your IP address (for IPv6, only the first 64 bits) with a secret key. We don’t store the IP address itself.

The purpose is to make sure everyone gets at most one code and the limited codes are shared fairly. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is fair distribution and preventing abuse.

Retention: We delete the identifier of your internet connection after 30 days. We delete the hash of the browser identifier after 365 days. After that, all that remains is that a code was handed out and when, with no link to you.

We don’t store names, email addresses or Google accounts. This page doesn’t tell us whether, or with which account, you redeem a code.

5. Cookies

The page only sets cookies that are technically necessary for the service:

gpc_session: Protects the form against forged requests. Deleted when you close your browser.
gpc_claim: Random identifier so you can see your code again and don’t get a second one. Deleted after 365 days.
gpc_lang: Only if you pick a language: remembers your choice. Deleted after one year.

Storing these cookies on your device is based on § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), as they are strictly necessary to provide the service you asked for. Any further processing is based on Art. 6(1)(f) GDPR. No consent is required. If you block cookies, you can’t get a code.

6. Redeeming on Google Play

The links “Redeem in Play Store” and “play.google.com/redeem” lead to Google Play, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data is only sent to Google once you open one of these links. Google’s privacy policy applies there.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to the processing at any time on grounds relating to your particular situation (Art. 21 GDPR). To do so, email info@stefandj.de.

Because we don’t store names or IP addresses in plain text, we can usually only match stored data to you if you help us, for example by telling us your code (Art. 11 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.