Racknote privacy

Who is responsible

Thomas Scheiber is responsible for the personal information handled to provide Racknote, answer support requests and operate this website. Contact me with a privacy question or request:

Information on your device

Racknote stores device details, serial numbers, notes, attached photos, unfinished drafts, settings and optional tool history locally. I do not receive a copy of your library through an automatic Racknote upload. The app has no account, advertising, purchase or cloud-sync service.

Local calculations, text conversions, token inspection and hashing run on the device. Choosing a photo or a file gives Racknote access to the item you select. Photos used with a device record or draft are kept in app storage. Text recognition runs on the device. Camera and photo access can be changed in the device's Settings.

You can edit and delete records, discard drafts, and clear history. Turning history off also clears existing history. JWT and JWE inputs, Wi-Fi credentials and hash inputs are excluded from tool history. Racknote also filters recognized credentials, but that filter cannot identify every confidential value. Avoid putting secrets in records or other fields you intend to keep.

Undo and recovery checkpoints can retain earlier local copies of a record. Exported files and messages you already sent remain with the destinations you chose. Removing a record is not a secure-erasure promise for every device or backup copy.

Copying, exports and backups

Copy puts the selected value on the device clipboard. Copies marked sensitive use a local-only clipboard entry with a 60-second expiry. Other copies use the normal system clipboard and its settings.

Sharing hands a result or file to the app or location you choose. A complete backup can include records, drafts and attached photos. CSV and JSON exports do not include the photo files. Settings and tool history are excluded from library backups. Protect exported files and check their contents before sharing them. The receiving app or storage provider handles them under its own privacy practices.

Network lookups

Running DNS, reverse DNS, registration or autonomous system lookups sends the requested domain, IP address or related query to an external service. That service receives the query and connection information, including the IP address visible to it. Lookups are sent when you request them, not as an automatic upload of your device library.

System DNS uses the device resolver and follows the current network and VPN settings. Other DNS choices are Cloudflare, Google and Quad9 over HTTPS. ASN lookups use Team Cymru's DNS information through the selected resolver and may request registration details. Registration lookups contact the registry selected from the bundled IANA information.

The provider can retain query or connection information under its own policy. You can choose a resolver or avoid a lookup. Do not submit internal names or addresses to a public service unless you intend to disclose them.

• Cloudflare DNS privacy
• Google Public DNS privacy
• Quad9 data and privacy policy
• Team Cymru privacy policy
• IANA protocol and registry information

Opening an admin portal or another external link takes you to that provider's website. Its privacy practices apply to information you enter there.

Support email

When you email support, I receive your email address, message, any name supplied by your email service and the attachments you choose to send. Hostinger hosts the support mailbox. Your own email provider also processes the message. Email support is optional. Racknote does not automatically attach your library or send an in-app report.

I use this information to answer your request and investigate the problem. For support needed to provide the app, the legal basis is performance of the requested service under Article 6(1)(b) GDPR. For general inquiries, troubleshooting and protecting the service, it is legitimate interests under Article 6(1)(f). The interests are responding to requests and keeping the service working. Information needed to meet a legal obligation is handled under Article 6(1)(c).

Support correspondence is retained while needed to resolve the request and necessary follow-up, or to meet a legal obligation or establish, exercise or defend legal claims. Retention depends on those purposes rather than a fixed period for every message. Contact me to request access or deletion. Deletion from the active mailbox does not guarantee immediate removal from provider backups or operational records.

This website

Cloudflare hosts and delivers these static pages. The site has no advertising scripts, analytics scripts, tracking pixels, browser-storage trackers or contact form. I do not keep a separate application access log or use Cloudflare Web Analytics for this site.

Cloudflare still processes information needed to deliver and protect the site, such as your IP address, requested URL, time, browser headers and security information. Its operational processing follows its published policy. The legal basis for providing and protecting the site is legitimate interests under Article 6(1)(f) GDPR. The interest is a usable, secure support website.

Providers and international processing

Hostinger processes support email and Cloudflare delivers the website. Their staff and subprocessors may process information outside the European Economic Area. Network lookup providers and destinations you choose for exports have their own processing locations. This policy does not promise EU-only processing.

Cloudflare and Hostinger publish data processing terms with international-transfer safeguards, including standard contractual clauses where applicable. Their terms and privacy notices describe those safeguards, subprocessors and retention practices. Contact me if you need information about a transfer involving your support request.

• Cloudflare privacy policy and data processing addendum
• Hostinger privacy policy and data processing addendum

Apple separately handles App Store downloads and platform services under its privacy policy and your device settings.

Your rights

Where GDPR applies, you can request access, correction, erasure, restriction of processing and data portability, subject to the legal conditions. You can object to processing based on legitimate interests. If processing relies on consent, you can withdraw that consent for the future. These requests do not affect processing that was lawful before withdrawal.

Email support@thomasscheiber.com with enough information to identify your request. I may need to verify your identity before providing or changing personal information. I cannot remotely access or delete the library held only on your device. Use the app's local controls for that information.

You can complain to the Austrian Data Protection Authority or the supervisory authority where you live or work. The Austrian authority also explains your data protection rights.

Changes

I will update this page if Racknote's handling of information changes. The effective date above identifies the current policy.