Privacy policy

At a glance

~/mindmap also works without an account: your mind maps are then stored only in your browser’s storage and are never sent to the server.

Only if you create an account do I store your email address, a hashed password and your mind maps on the server. There is no tracking, no advertising and no embedded third-party services – fonts and icons are served from this server.

Controller

Jeremy Thelen
Benediktusgasse 5
50679 Cologne, Germany
Email: jeremythelen07@gmail.com

Hosting

This application runs on a server hosted by [HOSTING PROVIDER, ADDRESS]. The provider processes data on my behalf under a data processing agreement pursuant to Art. 28 GDPR.

Server log files

Each request automatically logs the IP address, date and time, requested URL, referrer, browser and operating system. This serves the secure operation of the service (Art. 6(1)(f) GDPR). Log files are deleted after 14 days.

Using it without an account (browser storage)

Without an account, the editor stores your mind maps in your browser’s local storage (localStorage). This data never leaves your device. You can delete it at any time – individually in the editor or via your browser settings.

This storage is strictly necessary for the function you requested (§ 25(2) no. 2 TDDDG).

Account

For an account I process your email address, your password (only as a secure hash, never in plain text), your chosen language and the time of registration and confirmation. The legal basis is Art. 6(1)(b) GDPR (providing the service).

Accounts whose email address isn’t confirmed within 48 hours are deleted automatically. You can delete your confirmed account yourself at any time under “Account” – all your data is removed immediately.

To prevent abuse, a hash of your IP address is stored briefly during registration and password requests to limit the number of attempts.

Your mind maps

With an account, your mind maps (texts, colours, structure) are stored on the server for as long as your account exists. I don’t look at the content. Still, please don’t store particularly sensitive data there.

Sharing via link

If you create a share link, anyone with that link can view the mind map. The link is random and can’t be guessed; you can disable it at any time.

Emails

Confirmation and password emails are sent through my own mail server running on the same server. No newsletters or marketing emails are sent.

Cookies

No tracking or marketing cookies are used. Technically necessary are:

• Session cookie: keeps you logged in and protects forms; deleted when you close your browser.
• “Stay logged in”: only if you choose it, a cookie for 30 days.
• Language (“lang”): your language choice for one year.
• Theme: light/dark is stored in your browser and never leaves your device.

These are strictly necessary (§ 25(2) no. 2 TDDDG).

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Just send me an email. You can also export your mind maps as JSON yourself at any time.

You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

Last updated: October 2026