Privacy on this website

1. Controller

The controller responsible for the processing described in this policy is:

2. Hosting and delivery

This is a static website. It is delivered through Cloudflare Workers Static Assets by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States, which acts as our processor.

To deliver a page, Cloudflare necessarily processes the data your browser transmits with the request and the data of the connection itself:

• your IP address
• the date and time of the request
• the path requested
• the referring page, where your browser supplies one
• your browser and operating system identification (user agent)
• technical connection and TLS metadata

Cloudflare states that it processes this kind of metadata on behalf of its customers in data centres in the United States and in Europe. We have not enabled any data-localisation product, so we cannot rule out that processing takes place outside the EEA. Cloudflare’s self-serve subscription agreement incorporates a data processing addendum which includes the EU Standard Contractual Clauses as the transfer mechanism.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is making this website available in a reliable and secure form.

3. Security functions provided by Cloudflare

Cloudflare’s bot detection features (Bot Fight Mode and JavaScript Detections) are not enabled for this website, so no detection script is loaded and no cookie is set during a normal visit. Cloudflare’s automatic protection against attacks remains active. If it has to check a request — for example during an attack or for traffic from a suspicious network — Cloudflare may show a security check and then set a cookie named cf_clearance in your browser. The cookie is set as a first-party cookie for trysubs.app and is marked HttpOnly and Secure.

The exact duration of this cookie is controlled by Cloudflare’s security configuration.

Cloudflare uses this cookie to tell automated traffic apart from human visitors and to record that a visitor has already passed such a check. Our website code does not read this cookie; Cloudflare evaluates it for its security functions. It is not used by us for reach measurement, visitor analysis, profiling or advertising.

Cloudflare additionally sends the NEL and Report-To response headers, which activate the browser standard Network Error Logging. Where your browser supports it, it may send technical reports about failed connections to a Cloudflare endpoint (a.nel.cloudflare.com). These reports concern the technical delivery of the page — not its content, and not what you do on it.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is protecting the website against automated misuse and recognising delivery faults.

4. Logs and retention

We do not run a server of our own. This website has no server-side code, no database and no backend.

Workers Observability (Workers Logs) is disabled for this website, and no Logpush job is configured. We therefore do not receive request-level Workers logs through those features.

Cloudflare still processes the connection and security metadata described in sections 2 and 3 within its own infrastructure, in order to deliver and protect the site. Cloudflare states that it processes such data for a limited period. It does not publish a fixed period for this, and we neither set it nor have access to it.

5. Storage in your browser

This website follows the light or dark appearance set on your device. It saves no setting of its own for this and stores nothing in your browser’s local storage or session storage.

Our own code sets no cookies. During a normal visit no cookies are set at all; the only exception is Cloudflare’s security cookie in the situations described in section 3.

6. Contact by email

This website has no contact form. Contact links simply open your own email program.

Mail to support@trysubs.app first reaches Cloudflare Email Routing, which forwards it. Cloudflare states that Email Routing routes messages in real time and does not store message content. The destination mailbox is a Google Workspace mailbox, so Google processes your message as part of providing that mailbox.

We process the content of your message, your email address and anything else you choose to tell us, in order to deal with your enquiry.

Legal basis: Art. 6(1)(b) GDPR where your enquiry concerns a contract or steps taken before entering into one; otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries addressed to us.

We keep correspondence for as long as we need it to deal with the matter, and where statutory retention duties apply to it, until those duties expire.

7. Links to the App Store

The App Store buttons and links on this site are ordinary links. Nothing is transmitted to Apple while you are on our website — there is no pixel, no tracker and no preloading. Apple receives data only once you follow the link, and Apple’s own privacy terms then apply.

How Subs is licensed and how purchases work is described under Terms.

8. No analytics and no advertising

This website uses no web analytics, no tracking pixels, no advertising networks, no social media plugins and no cross-site tracking. Cloudflare Web Analytics is not active.

Fonts, images and the App Store badges are delivered from our own domain. Loading a page normally fetches no third-party resources: there is no Google Fonts request, no external CDN and no external asset of any kind. The one exception is the error reporting described in section 3 — if a network failure occurs, your browser may send a Network Error Logging report to Cloudflare’s endpoint.

9. Your rights

Where the legal requirements are met, you have in particular the following rights:

• information about the personal data we process (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)

Where we rely on Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.

You may also complain to a supervisory authority, in particular in the member state of your habitual residence, your place of work, or the place of the alleged infringement. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

To exercise your rights, write to support@trysubs.app.

10. Changes to this policy

We update this policy when the website changes in a way that affects it.