# Datenschutzerklärung

Zuletzt aktualisiert am 29 October 2026

This policy explains what Ankinize collects, why, and what you can do about it. We collect what running a sync service needs and nothing for advertising.

## What we collect

| Data | Why we hold it |
| --- | --- |
| Name, email address, password hash | To create and secure your account and to send verification and reset emails. |
| Your Collection and Media Files | To sync them to your devices and serve them through the API. We do not read or analyse their content. |
| API keys, Host Keys, sessions, passkeys, two-factor secrets | To authenticate you and your devices. |
| Request logs (time, route, status, IP address) | To rate-limit, to prevent abuse, and to show you your own API activity. |
| Error reports and performance timings (Sentry) | To find and fix faults and slow pages. No cookies and no page content; request headers, cookies and query strings are removed before sending. |
| Product analytics (PostHog), only if you allow it | To see which pages and features are used and how visitors become users. Linked to your account id when you are signed in. A masked recording of the session around an error (Sentry Replay) is stored only if you allow it. |
| Sign-up and subscription events | To count sign-ups and paid plans. Sent from our server with your account id, never your email or card details. |
| Billing records for paid plans | To provide Pro. Card details are handled by our payment processor and never reach us. |

## How we use it

To run the service, secure accounts, enforce storage limits, prevent abuse and send the emails you trigger. We do not sell your data and do not use it for advertising or profiling.

## Who else handles it

We use infrastructure providers to operate the service: database and object storage, email delivery, bot protection at login, payment processing, error monitoring (Sentry) and product analytics (PostHog). They process data only to provide those services. If you log in with GitHub, GitHub shares your verified email and profile name with us.

## Retention and deletion

We keep your data while your account exists. Deleting your account removes your Collection, media and profile; request logs and backups age out on a short schedule. You can export your data at any time.

## Your rights

You can access, correct, export and delete your data from the dashboard. Where the law gives you more, such as objecting to processing or complaining to a supervisory authority, those rights apply too. To use a right the dashboard does not cover, write to [contact@ankinize.com](mailto:contact@ankinize.com).

## Cookies

We use the cookies needed to keep you logged in and remember your language. Analytics and session recordings run only if you allow them in the banner, and you can withdraw at any time. See the [Cookie Policy](https://ankinize.com/de/cookies).

## Self-hosted servers

If you use a server operated by someone else, that operator controls your data and this policy may not describe their practices.

## Changes

We will update this page when practices change and show the date at the top.

## Contact

Questions about this policy or your data go to [contact@ankinize.com](mailto:contact@ankinize.com).