Comiks
Deutsche Version

Privacy policy

Last updated 16 September 2026. This policy covers the website, the web app under /app and the iOS and Android app “Comiks”. The German Datenschutzerklärung is the legally binding version.

1. Controller

Johannes Innerbichler, Warwitzstraße 9, 5023 Salzburg, Austria
Email: contact@comiks.app

No data protection officer is appointed, as there is no legal obligation to do so.

2. In short

3. Hosting and server logs

The website and backend are hosted by OVH Cloud. On every request the server necessarily processes: IP address, time of access, requested address, browser or app version (user agent) and status code. The logs serve secure and stable operation and troubleshooting and are deleted after 14 days.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

4. Account and sign-in

Using the app requires an account. You sign in through an identity service (Keycloak) operated by us at OVH Cloud, with your existing Google or Facebook account. From that provider we receive your name, your email address and an identifier of your account. We do not store a password.

What Google or Meta process during sign-in is governed by their own policies: Google, Meta / Facebook.

The identity service keeps sign-in events (time, account, IP address) for a short period to detect abuse.

Legal basis: Art. 6(1)(b) GDPR (performance of the contract: providing your account).

5. Photos and comics

The app is about turning photos into comic panels. It accesses the camera and photo library only with your permission, and only the image you pick and crop is uploaded. Photos, panels and the resulting comics are stored in object storage (OVH Cloud).

Images may show people. Please upload only photos you are entitled to share with your fellow players. Comics are only available to the users involved; image addresses are not public and are only served to a signed-in participant.

Legal basis: Art. 6(1)(b) GDPR.

6. Connections, search and invites

To draw a comic together you connect with other users. You can search for users by name; other users see your name and, if any, your profile picture.

You can also send a comic as an invite link to someone who has no account yet. The link carries a random token; whoever holds the link sees your name and the first panel of the comic before signing in. Invites expire after a while. Share invite links only with people you want to show that panel to.

Legal basis: Art. 6(1)(b) GDPR.

7. Email

For notifications (for example about invites) we send email through Amazon Simple Email Service of Amazon Web Services EMEA SARL, Luxembourg, eu-central-1. Your email address and the message content are transmitted to AWS for that purpose. We send no newsletters.

Legal basis: Art. 6(1)(b) GDPR.

8. Cookies and local storage

This website sets no cookies. The web app keeps your sign-in tokens in your browser's local storage so you stay signed in; they are removed when you sign out. The iOS and Android apps keep the tokens in the device's protected storage. A technical session cookie is set only in the internal administration area, which users cannot access.

9. App stores

If you install the app from the Apple App Store or Google Play, the store operator processes data under its own terms, over which we have no influence.

10. Recipients and processors

Your data is passed to the following service providers, which process it on our behalf:

Google and Meta act as independent controllers during sign-in. Transfers to countries outside the EU only take place insofar as those providers do so under the safeguards of Art. 44 et seq. GDPR.

11. Retention and deletion

Your account, comics, connections and invites are kept as long as your account exists. You can request deletion of your account and everything tied to it at any time by emailing contact@comiks.app. Comics you made with others remain available to them in the form in which they were already shared. Backups are overwritten after 30 days.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Contact contact@comiks.app to exercise them.

If you believe the processing of your data violates data protection law, you can lodge a complaint with the Austrian data protection authority: Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

13. Children

Comiks is not directed at children under 14. We do not knowingly collect data from children; if we learn that we have, we delete the account.

14. Changes

This policy is updated when the app or the legal situation changes. The current version is always available at this address.

See also the imprint.