Privacy policy
In short
This policy covers this site, downloads.sdrmm.com and the SDRmm iPhone app. All process as little data as possible: no cookies, no tracking across sites, no advertising, no account. The sections below explain what still gets processed, and why.
Controller
Julian Haag – Informatiker
Lieselsweg 11
53945 Blankenheim
Germany
Email: contact@sdrmm.com
Hosting and server logs
This site is hosted on Cloudflare Workers by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare processes the IP address of every visitor to deliver the site and protect it from attacks. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in delivering the site reliably and securely). Cloudflare is certified under the EU-U.S. Data Privacy Framework, which covers the transfer to the USA (Art. 45 GDPR).
Visitor statistics
Cloudflare Web Analytics counts page views, referring sites, countries and load times. It sets no cookies, stores nothing in your browser and does not identify or follow you across sites. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in knowing which pages are read).
Download page
To show the latest release and its file sizes, your browser asks the GitHub API (api.github.com). GitHub receives your IP address and user agent. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in offering the right file).
Download counts
Downloads, Linux package repository refreshes and desktop update checks are served from downloads.sdrmm.com. For each, Cloudflare Workers Analytics Engine and Workers Logs store the file path, release version, operating system, CPU architecture and country. No IP address or other identifier is stored, so a count cannot be linked to you. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in knowing how many people use SDRmm).
Live demo map
The Aircraft and Ships demo scenes show a map. Its style, tiles and fonts load from OpenFreeMap (tiles.openfreemap.org), which receives your IP address and user agent. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in showing the demo).
Local storage
The docs remember theme and sidebar (mdbook-theme, mdbook-sidebar). The demo remembers display choices under keys starting with sdrmm. These values stay in your browser, are never sent to a server and contain no personal data. They are strictly necessary for functions you use (§ 25 (2) no. 2 TDDDG). You can clear them in your browser settings at any time.
Fonts and links
Fonts are served from this site. No connection is made to Google Fonts or similar services. Links to GitHub, Discord, YouTube, Reddit and X are plain links: nothing loads from these services until you follow one.
Contact form and email
When you use the contact form or write an email, the data you send (name, email address, message) is processed solely to handle your request. Form messages are delivered to my inbox by Cloudflare Email Routing and are not stored on the site. Legal basis: Art. 6 (1) (b) GDPR for contract-related requests, otherwise Art. 6 (1) (f) GDPR. The data is deleted once it is no longer needed and no statutory retention obligations apply.
Recording donations
Recordings you upload, with the signal description, notes and optional email address you enter, are stored in a private Cloudflare R2 bucket, and I get an email with these details. They are used only to build and test SDRmm decoders and are never published. Legal basis: Art. 6 (1) (a) GDPR (your consent by uploading). Email contact@sdrmm.com to have a donation deleted.
iPhone app
The app only talks to SDRmm servers you pair with. I receive no data from it, and it contains no analytics or advertising code. Pairing credentials stay in the iOS Keychain, settings stay on the device. Forgetting a server in Settings removes its credentials. If you opted in on your device, Apple shares anonymous crash reports and usage statistics with me.
Local network and camera
Local network access finds SDRmm servers nearby. The camera only scans pairing QR codes; images never leave the device.
Location during missions
With your permission, active missions use precise location, heading and motion for navigation and field measurements. With position sharing on, position and heading go to your paired server, also in the background while a mission runs. The server operator decides what is stored there and handles deletion requests. End the mission or revoke location access in iOS Settings to stop.
Maps and routes
Maps and routes come from Apple MapKit. Route requests send start and destination to Apple under Apple's privacy policy.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). An informal email to contact@sdrmm.com is sufficient to exercise these rights.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestr. 2–4, 40213 Düsseldorf, Germany.