Privacy policy

Who is responsible

Responsible for personal data on this website is:

Sebastian Pfeiffer
Ziegelwende 31
97256 Geroldshausen
Deutschland
seppo@seppo.app

In short

Dawnforge is a private website for family and friends. It uses no analytics, no advertising and no tracking, and its pages load nothing from other companies’ servers. Your data stays on our own server and our own computers. It is not sold or passed on.

Hosting

The website runs on a rented server of Contabo GmbH, Aschauer Straße 32a, 81549 München, Deutschland, located in Deutschland. The hosting company processes data only on our behalf, under a data processing agreement (Art. 28 GDPR).

Visiting the website

When you open a page, your browser sends technical data such as your IP address, the time, the page and your browser type. The server needs this to deliver the page and keeps no access logs. To slow down password guessing, the login service keeps the IP address of a sign-in attempt in memory for 15 minutes. Legal basis: Art. 6(1)(f) GDPR, our interest in a working and secure website.

Cookies and browser storage

We only use cookies and browser storage the website needs to work: a sign-in cookie (for one day, or 400 days if you choose to stay signed in), a language cookie (one year), a cookie of a few seconds for page transitions, and browser storage for your theme, settings and chats. There are no tracking or advertising cookies, so no consent banner is needed (§ 25(2) TDDDG). If you agree to use the small AI in your browser, its model files (about 0.45 GB on phones, 1.1 GB on computers) are stored in your browser’s storage for seppo.app. Clearing the site data for seppo.app removes them.

Your account

For an account you choose a username and a password. We store the username, a one-way scrambled form (hash) of the password and, if you add them, a profile picture and your two-factor sign-in key. What you create in the tools is stored on our server too: chats, files, worlds, stories and boards. If you hand your account over to someone, what you made moves to them and your Armoryhall library joins theirs. To share the AI computers fairly we log how many messages, pictures and words you use, with the time and the model, but not what you wrote. All of this is kept until you delete your account on your account page, which deletes it. Legal basis: Art. 6(1)(b) GDPR, to provide the account you asked for.

The AI

Chats and pictures are worked on by PCs that members of this site connect and share with each other (an open circle), over encrypted connections: your own PC first if you connected one, otherwise another member’s PC that shares, which gets the job without your name. That member could technically see the chat or picture while their PC works on it; the app stores nothing there. Under AI Forge in your account you can choose Only my PC, and a photo you edit only goes to another member’s PC if you say yes each time, and its location and camera data are removed first. Nothing is sent to AI companies. Painted pictures and uploaded photos are kept on our server and removed from the computer that painted them. They are deleted with your account, unless you hand the account over to another member who accepts it. If you turn on web search, the search words and the pages to read are fetched by our server through our own search service; your IP address is not passed on. While no computer is on, a small AI can run in your browser: its files come from seppo.app and your messages stay on your device.

Newsletter

If you sign up for a newsletter, we store your email address, your language and when you signed up and confirmed. You only get newsletters after you confirm the link in our first email (double opt-in). Every newsletter has a link to unsubscribe. After that the address is only kept marked as unsubscribed, so it gets no more mail, unless you ask us to delete it. Newsletters are sent from our own mail server. Legal basis: your consent, Art. 6(1)(a) GDPR, which you can withdraw at any time.

Email

If you write to us or have a mailbox on seppo.app, the mail is stored on our own mail server and only used to answer or deliver it.

Notifications (web push)

If you turn notifications on, we store for each device the address and keys that your browser gives us for it, the topics you chose, when it was added, when a message last arrived and how many in a row failed, linked to your account and to your sign-in on that device. We keep this until you turn notifications off, sign out on that device or leave your account, or until 90 days pass with no message delivered and without you opening the Notifications page. Messages travel through the push service of your browser maker (Apple, Google, Mozilla or Microsoft), which may be outside the EU (United States). The transfer rests on the adequacy decision of the European Commission for the EU-US Data Privacy Framework (Art. 45 GDPR). The content of a message is encrypted, so that service cannot read it, but it can see that a message was sent, when, and how large it is. Messages only contain fixed short texts, never your chats or mail. The basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time on the Notifications page in the settings or in the notification settings of your browser or phone; turning it off on the page deletes the saved device at once.

Your rights

You can ask which data we have about you and have it corrected, deleted, restricted or handed to you in a common format (Art. 15 to 20 GDPR). You can object to processing based on our interests (Art. 21 GDPR) and withdraw a consent at any time. Write to the address above. You can also complain to a data protection authority, for example the one in the German state where you live.

Last changed: 2026-10-11