Privacy

Controller and contact

The controller is Manuel Knakowski. For privacy questions and requests to exercise your rights, contact privacy@mknak.de.

Website: access and hosting

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When a page is requested, the server receives connection data needed to deliver it. This includes the IP address, request time and requested file or page, browser and operating-system information supplied by the browser, the previous page if transmitted, and technical request information.

Processing serves delivery, troubleshooting and protection against misuse and attacks. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in a secure, working website. STRATO processes hosting data as a service provider. This website does not build usage profiles or connect visits to your Pocket collection.

STRATO states that it keeps IP addresses for attack detection for no longer than seven days. It masks IP addresses or hostnames in access logs made available to hosting customers; according to its hosting information, these logs may be available for up to six weeks. This is hosting log processing, not cookies or an analytics tool embedded by us.

Website: cookies, content and links

This website sets no cookies and uses no localStorage, sessionStorage, tracking pixels, advertising scripts or embedded analytics. Images, stylesheets and any font files are served from the website's own hosting. Language selection uses page links and is not stored in your browser. Your browser may cache files as part of displaying the pages.

External services such as the App Store and Apple or Google privacy information are ordinary links. Opening a link takes you away from this website; the destination then processes connection data under its own notice. Google AdMob is part of the iPhone/iPad app described below, not this website.

Website and app: email support

If you email us, we process your sender address, message and any information or attachments you choose to send so we can handle your request. Mail providers involved in delivery may receive this information. An email link opens your mail application; the website does not itself submit a contact form.

For app requests needed to fulfil our service relationship or provide information you requested before entering it, the basis is Article 6(1)(b) GDPR. Other requests are handled under our legitimate interest in responding, Article 6(1)(f) GDPR. We handle privacy-rights requests to meet legal obligations under Article 6(1)(c) GDPR.

We keep correspondence for as long as needed to handle the request and necessary follow-up, then delete it unless statutory retention or establishing, exercising or defending claims requires further storage. Do not send Apple passwords. A full advertising ID is normally unnecessary for general support.

App: displaying an IDFA and permissions

IDFA Pocket helps you display and manage snapshots of advertising identifiers for development and testing. On iPhone, iPad and Apple TV, the app reads the current local IDFA only after permission in Apple's App Tracking Transparency (ATT) prompt. No usable local ID is available without permission or if the system restricts access. The Mac app does not read a local Mac IDFA.

Access to the advertising identifier is based on your consent under Article 6(1)(a) GDPR and, where applicable, section 25(1) of the German TDDDG. You can change ATT permission in your device's privacy settings. Withdrawing permission does not automatically delete previously saved snapshots.

App: Pocket collection and iCloud

When you save or import an entry, the app processes its IDFA, your label or confirmed device name, device type, capture and modification times, and technical synchronization identifiers and change state. Custom platform names, colours and manual marks are also part of your collection. Marks are your own notes; they do not register an ID with an advertising platform.

iPhone, iPad and Mac keep a local copy. When an available iCloud account is verified, changes sync through Apple CloudKit to that account's private database. On Apple TV, the selected user determines the iCloud account. TV storage is a cache the system can purge; a direct upload counts as saved only after iCloud confirms it.

This processing provides the storage and synchronization functions you request, under Article 6(1)(b) GDPR. Device access strictly necessary for those functions falls under section 25(2)(2) TDDDG where applicable. We operate no separate server for your Pocket collection. The app does not pass saved Pocket entries to the advertising service or receive your iCloud password.

App: retention and deletion

Saved entries remain in your collection until you remove them or delete the associated app/iCloud data. You can edit or delete entries and platforms on iPhone, iPad and Mac. Deletions sync when a connection is available. Uninstalling the app alone does not delete the iCloud collection.

Local caches, pending changes and deletion records may remain for synchronization. Platform data also retains deleted platform definitions and checked or unchecked marks associated with an IDFA so that older changes cannot restore them. Deleting a visible Pocket entry therefore does not automatically remove every technical or associated platform record. The app has no automatic time-based expiry for these synchronization records.

For complete removal of the stored collection, also use your system's iCloud app-data management where available and remove local app data from your devices. Contact support if you need help. Apple's own notice governs its service-side backup and deletion procedures; we do not promise immediate removal from every backup.

App: QR transfer, camera and clipboard

A displayed QR code contains the IDFA, device name, device type and, where present, capture time as unencrypted content. Anyone who can see, photograph or scan it can read those details. Transfer also works across different iCloud accounts. Show a code only to your intended recipients.

After camera permission, the iPhone/iPad scanner processes camera frames on the device to read QR codes. The app neither saves nor uploads those images. It does not open scanned links. You choose whether to save an imported result to Pocket. Optional camera access is based on your consent, Article 6(1)(a) GDPR; imports and exports you initiate provide the requested app function, Article 6(1)(b) GDPR.

Choosing Copy writes the ID to the operating system's clipboard. Access by other apps or your other devices depends on your system settings. You can overwrite it by copying another item. Camera permission can be withdrawn in system settings.

App: Apple services and notifications

CloudKit and technical change notifications use Apple services. For people in the EEA, Apple identifies Apple Distribution International Limited in Ireland as the responsible Apple entity. Apple also processes data relating to your Apple Account and use of its services under its own privacy terms.

Notifications about newly received IDs on Mac are optional. With your permission, the app creates local notifications that show a device label or the number of new entries, without an advertising ID. You can disable them in the app and in macOS notification settings. This optional feature is based on consent, Article 6(1)(a) GDPR.

Mac app: one-time purchase and purchase entitlement

The Mac app is free to download. A non-consumable in-app purchase unlocks the full Mac app; it is not a subscription. Apple processes the purchase through the Apple Account used for the App Store. Apple handles account, payment and purchase information and provides receipt and transaction information with transaction identifiers. This purchase does not disclose your payment-card details or Apple password to the developer.

The app uses StoreKit 2 to check Apple-verified transaction information and the resulting purchase entitlement on your Mac. To unlock access, it evaluates the product identifier, purchase type, verification status and revocation information. The app holds the resulting unlock status in memory while running. It keeps no separate persistent licence store and sends no licence or purchase transaction to the Pocket CloudKit collection or the advertising service. StoreKit manages its own local purchase data.

These checks provide and restore the purchased Mac features under Article 6(1)(b) GDPR. Strictly necessary device access falls under section 25(2)(2) TDDDG where applicable. Apple retains purchase records under its own legal obligations and to provide purchased content. Uninstalling the app does not remove the purchase from your App Store account; Apple’s retention is described in the linked notice.

Mac app: restoring purchases and refunds

The app checks purchase entitlement at launch and when it becomes active again, and processes transaction changes reported by StoreKit. When you choose to restore purchases, it requests a sync with the App Store. Use the Apple Account that purchased the Mac unlock. This can differ from the iCloud account used for your Pocket collection.

Request an in-app purchase refund from Apple. If Apple revokes the purchase entitlement, for example after a refund, the app locks the paid Mac features when it processes the changed status. Apple decides whether and when to grant a refund under the applicable terms and statutory rights.

iPhone and iPad app: advertising

The iPhone/iPad version uses Google Mobile Ads (AdMob) for banners and Google's User Messaging Platform (UMP) for advertising privacy choices. Mac and Apple TV do not contain these advertising SDKs and do not show ads.

For users in the EEA, Google identifies Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes data for its own purposes under its privacy policy.

Depending on consent and configuration, Google may process IP addresses and approximate region, device or advertising identifiers, ad views and interactions, and crash and performance data. Purposes include serving and measuring advertising, improving its performance, security and abuse prevention. Google and advertising partners identified in the privacy choices may receive data.

Advertising and related device access requiring consent are based on Article 6(1)(a) GDPR and section 25(1) TDDDG. Necessary settings for managing your choices serve our data-protection obligations, Article 6(1)(c) GDPR; strictly necessary storage of those choices falls under section 25(2)(2) TDDDG. The advertising privacy choices provide purpose and recipient details.

ATT permission and advertising consent are separate decisions. Ad requests begin only when UMP allows them. Denying ATT therefore does not automatically mean no advertising can be loaded. The Pocket collection is not sent to AdMob.

App: changing advertising choices

On iPhone and iPad, open the app's information sheet and choose “Ad privacy options” where those choices are required for your region. You can change or withdraw consent there for future processing. Manage ATT separately in Settings → Privacy & Security → Tracking. On Apple TV, use the system's tracking privacy settings.

Withdrawal does not affect the lawfulness of processing before it. If privacy choices temporarily fail to load, try again with an active internet connection or contact us. This website has no advertising consent that replaces your app choices.

App: recipients outside the EEA and provider retention

Apple and Google services may process data outside the EEA, including in the United States. Apple refers to standard contractual clauses for EEA transfers. Google describes adequacy decisions, including the EU–US Data Privacy Framework for certified US recipients, and standard contractual clauses where required. The linked provider notices explain these safeguards and how to request copies.

Apple and Google's service-side retention depends on the data, purpose, your settings and legal obligations. Withdrawing consent in IDFA Pocket does not automatically erase information a provider already holds. Google's notice explains deletion controls and different retention periods; it does not give one common period for all advertising and diagnostic data.

Your rights

Subject to legal conditions, you may request access, correction, erasure, restriction and data portability. Where we rely on legitimate interests, you may object on grounds relating to your particular situation. You may withdraw consent at any time for future processing. Contact privacy@mknak.de.

You may complain to a data-protection supervisory authority, particularly where you habitually live, work or believe an infringement occurred. The European Data Protection Board provides a directory of European supervisory authorities.

You do not have to send support information. The website cannot be delivered without necessary connection data, and the relevant app functions are unavailable without required permissions or iCloud access. We do not make solely automated decisions about you with legal or similarly significant effects.

Changes

We update this notice when app functions, services or legal requirements change. The date above identifies this version.