Privacy Policy / Datenschutzerklärung
Last updated: 2/21/2026
1. Introduction
We take the protection of your personal data very seriously. This privacy policy explains what data we collect when you visit TinyPencils.eu, how we use it, and your rights under the General Data Protection Regulation (GDPR).
2. Data Controller
For details regarding the data controller responsible for this website, please refer to our Impressum.
3. Data We Collect
3.1 Server Log Files
When you visit our website, our web server automatically collects and stores information in server log files. This data is collected for technical and security purposes:
- IP address (anonymized after 7 days)
- Date and time of access
- Requested page/file
- HTTP status code
- Browser type and operating system (User-Agent)
Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR) for ensuring website security and technical functionality
Retention Period: 7-14 days, then automatically deleted or anonymized
3.2 What We DON'T Collect
- No unnecessary cookies (only essential ones or analytics if consented)
- No social media tracking pixels (e.g. no Facebook Pixel, no TikTok Pixel)
- No cross-site tracking or user profiling
- No tracking of individual worksheet downloads (downloads happen client-side)
- No third-party advertising services
3.3 Google Analytics
We use Google Analytics 4 (GA4) to understand how visitors interact with our website. This service is provided by Google Ireland Limited. We only use GA4 if you have explicitly consented via our cookie banner.
- IP addresses are anonymized by default.
- Data is retained for 14 months.
- We have disabled data sharing with other Google services.
You can revoke your consent at any time via the Cookie Settings link on any page.
3.4 Consent Mechanism
We ask for your consent via a cookie banner when you first visit the site.
- Consent is stored in a cookie named "cookie_consent" with the value "true" (granted) or "false" (denied).
- The consent state is mirrored in the app for fast client-side behavior and is managed through the Cookie Settings link.
- If the consent cookie is missing or invalid, we treat this as no consent.
- You can withdraw consent at any time via the Cookie Settings link on every page; analytics stops immediately in the same session.
- Clearing browser cookies is optional and not the primary withdrawal mechanism.
- Analytics only runs after explicit consent is given.
- We do not monitor manual cookie changes made via browser developer tools.
3.5 Cookie Table
We use the following cookies. Analytics cookies are set only after explicit consent.
| Cookie | Purpose | Type | Duration | Provider | Legal basis |
|---|---|---|---|---|---|
| cookie_consent | Stores your cookie consent decision. | Essential | 12 months | First-party | Art. 6(1)(f) GDPR / §25(2) TDDDG |
| _ga, _ga_* | Google Analytics (GA4) usage measurement. | Analytics | Up to 24 months | Google Ireland Limited | Art. 6(1)(a) GDPR / §25(1) TDDDG |
4. Hosting & Data Processing
Our website is hosted on servers provided by:
Provider: Hetzner Online GmbH
Industriestr. 25, 91710 Gunzenhausen, Germany
Hetzner processes server log data on our behalf as a data processor. Data is stored on servers located in Germany (EU).
5. Your Rights Under GDPR
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right to Access (Art. 15 GDPR): You can request information about what personal data we process about you
- Right to Rectification (Art. 16 GDPR): You can request correction of inaccurate personal data
- Right to Erasure (Art. 17 GDPR): You can request deletion of your personal data ('right to be forgotten')
- Right to Restriction (Art. 18 GDPR): You can request restriction of data processing
- Right to Data Portability (Art. 20 GDPR): You can request your data in a structured, machine-readable format
- Right to Object (Art. 21 GDPR): You can object to processing based on legitimate interest
- Right to Lodge a Complaint: You can file a complaint with your local data protection supervisory authority
6. SSL/TLS Encryption
This website uses SSL/TLS encryption for security. All data transmitted between your browser and our server is encrypted. You can recognize an encrypted connection by the 'https://' in the address bar and the lock icon in your browser.
7. Data Transfer to Third Countries
We do not transfer any personal data to countries outside the European Union (EU) or European Economic Area (EEA). All data processing occurs on servers located in Germany.
8. Children's Privacy
Our website and worksheets are designed for children. However, we do not knowingly collect personal data from children. Our website does not require registration, and worksheet downloads happen client-side without data collection. Parents and educators are responsible for supervising children's internet use.
9. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The 'Last updated' date at the top of this page indicates when changes were last made.
10. Contact
If you have questions about this privacy policy or want to exercise your data protection rights, please contact us via our Impressum page.