Privacy Policy
Last updated: March 2026
1. Data Controller
The data controller for data processing through the Hoppla platform is:
Jakob Bennemann
Neubrückenstraße 73
48143 Münster, Germany
Email: [email protected]
See our Impressum for full contact details.
2. Data Protection Contact
For all data protection inquiries:
Email: [email protected]
3. Overview of Processing Activities
We process personal data for the following purposes:
- Providing and operating the Hoppla monitoring platform
- User account management and authentication
- Delivering monitoring alerts and notifications
- Billing and payment processing
- Security monitoring and fraud prevention
- Service improvement and error diagnostics
- Compliance with legal obligations
4. Types of Personal Data Collected
4.1 Account Data
- Name and email address
- Hashed password (bcrypt)
- Language preference (de/en)
- Consent timestamps and IP addresses at registration
- Team membership and role assignments
4.2 Monitoring Configuration Data
- URLs, domains, and IP addresses added for monitoring
- Notification channel configurations (email addresses, webhook URLs, Slack/Discord/Teams channel identifiers, Telegram chat IDs)
- Cron monitor endpoint URLs and schedule configurations
- Agent monitor authentication tokens
4.3 Monitoring Result Data
- Check results: response times, HTTP status codes, SSL certificate metadata, DNS records, Lighthouse scores
- Incident records and notification delivery logs
- Crawl results (broken links, mixed content, redirect chains)
- Server metrics reported by agents (CPU, memory, disk usage)
4.4 Technical Data
- IP addresses (for rate limiting, security logging, and abuse prevention)
- Session identifiers and last activity timestamps
- Audit log entries (actions performed, timestamps, acting user)
- Browser type and operating system (from HTTP headers, not actively collected)
4.5 Billing Data
- Company name, billing address, and VAT ID
- Payment method identifiers (we do not store full credit card numbers)
- Invoice history and payment status
4.6 Status Page Data
- Public status page configuration (title, custom domain, selected monitors)
- Status page visitor data: we do not track visitors to public status pages beyond standard server logs
4.7 Early-Access Waitlist Data
If you sign up for our early-access waitlist, we process the following on the basis of your consent (Art. 6(1)(a) GDPR): your email address, any optional qualifying answers you provide (current monitoring tool, number of sites/clients, reseller interest), the campaign attribution parameters of the link you arrived through (UTM parameters, referring page), and proof of consent (timestamp, IP address, and the version of the consent text). We use this solely to contact you about early access and the product launch. We use a double opt-in: you must confirm your email via a link before you are added to the list. You can withdraw your consent at any time via the unsubscribe link in every email, which deletes your entry. We keep waitlist entries until launch or until you unsubscribe, whichever comes first.
5. Legal Basis for Processing
We process personal data based on the following legal grounds under the EU General Data Protection Regulation (GDPR):
| Processing Activity | Legal Basis |
|---|---|
| Account management, service provision | Contract performance, Art. 6(1)(b) GDPR |
| Monitoring execution and alerting | Contract performance, Art. 6(1)(b) GDPR |
| Billing and invoicing | Contract performance, Art. 6(1)(b) GDPR |
| Security logging, fraud prevention | Legitimate interest, Art. 6(1)(f) GDPR |
| Error diagnostics and service stability | Legitimate interest, Art. 6(1)(f) GDPR |
| Tax and accounting records | Legal obligation, Art. 6(1)(c) GDPR (§147 AO, §257 HGB) |
| Marketing communications (if opted in) | Consent, Art. 6(1)(a) GDPR |
| Essential cookies and session management | §25 Abs. 2 Nr. 2 TDDDG (strictly necessary) |
6. Data Retention
| Data Category | Retention Period |
|---|---|
| Check results (TimescaleDB) | Per plan: 7–365 days (up to 730 days with reseller override), then automatically pruned |
| Notification delivery logs | 90 days |
| Audit logs | 365 days |
| Session data | Purged upon expiration (max 2 hours idle) |
| Account data | Until account deletion + 30-day grace period |
| Invoices and billing records | 10 years (legal retention per §147 AO) |
| Security/access logs | 90 days |
After the retention period, data is automatically and irreversibly deleted.
7. Your Rights as a Data Subject
Under the GDPR, you have the following rights. You can exercise most of these directly in your account settings or by contacting [email protected]:
- Right of Access (Art. 15 GDPR) — Request a copy of your personal data. Use Settings > Data & Privacy > Export Data.
- Right to Rectification (Art. 16 GDPR) — Correct inaccurate data via your profile settings.
- Right to Erasure (Art. 17 GDPR) — Delete your account and all associated data via Settings > Data & Privacy > Delete Account.
- Right to Restriction of Processing (Art. 18 GDPR) — Contact us to restrict the processing of your data.
- Right to Data Portability (Art. 20 GDPR) — Export your data in a structured, commonly used, machine-readable format (JSON).
- Right to Object (Art. 21 GDPR) — Object to processing based on legitimate interest. Contact us with the specific processing activity you object to.
- Right to Withdraw Consent (Art. 7(3) GDPR) — Withdraw previously given consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
7.1 Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority. The competent supervisory authority is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2-4
40213 Düsseldorf, Germany
www.ldi.nrw.de
You may also lodge a complaint with the supervisory authority in your own EU/EEA member state.
8. Automated Decision-Making
The Service performs automated monitoring and alerting (e.g., incident detection when a check fails). These are operational functions of the Service, not decisions that produce legal effects or similarly significantly affect you within the meaning of Art. 22 GDPR.
We do not use your personal data for profiling, automated credit scoring, or other forms of automated individual decision-making.
9. Sub-Processors
We use a limited number of sub-processors to provide the Service. All sub-processors are bound by Data Processing Agreements and process data only as instructed by Hoppla for the stated purpose.
See our Sub-Processor List for full details including purpose, location, and data categories.
10. International Data Transfers
All primary data storage and processing occurs within the European Union (Hetzner Cloud, Germany and Finland).
Where sub-processors have parent entities outside the EU/EEA, we ensure appropriate safeguards are in place:
- EU Standard Contractual Clauses (SCCs) per Commission Implementing Decision (EU) 2021/914
- Verification that the sub-processor maintains adequate technical and organizational measures
- Data transfer impact assessments where required
Cloudflare processes certain data globally (DNS queries, DDoS mitigation) but is configured to process EU traffic within EU data centers where possible.
11. Cookies and Local Storage
We only use essential cookies and local storage items that are strictly necessary for the Service to function. No tracking, analytics, or advertising technologies are used. See our Cookie Policy for a complete list.
Legal basis: §25 Abs. 2 Nr. 2 TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz) — storing information on and accessing information from end-user devices is strictly necessary to provide the telemedia service explicitly requested by the user.
12. Security Measures
We implement appropriate technical and organizational measures pursuant to Art. 32 GDPR to protect your data, including:
- Encryption at rest (AES-256) and in transit (TLS 1.3 on all Hoppla domains; TLS 1.2 minimum for custom domains)
- Database-level tenant isolation via PostgreSQL Row-Level Security (RLS)
- Hashed passwords using bcrypt with appropriate cost factor
- Rate limiting on all API endpoints
- Comprehensive audit logging
- Regular security reviews and vulnerability scanning
- Multi-factor authentication available for all accounts
- Principle of least privilege for internal access controls
For a comprehensive description, see our Technical and Organizational Measures (TOM).
13. Data Processing on Behalf of Customers
When you use Hoppla to monitor websites or services, Hoppla may process data on your behalf (e.g., crawling your websites to detect broken links, checking SSL certificates). In this context, you are the data controller and Hoppla is the data processor. The terms of our Data Processing Agreement apply.
14. Reseller and White-Label Processing
If you access Hoppla through a reseller or white-label partner, the reseller is the data controller for your account data. Hoppla processes data on behalf of the reseller as a data processor. The reseller's privacy policy applies in addition to this policy.
15. Changes to This Policy
We may update this privacy policy to reflect changes in our practices or applicable law. Material changes will be communicated via email to account administrators or via in-app notification at least 30 days before taking effect.
The "Last updated" date at the top of this page reflects the most recent revision. Previous versions are available upon request.
16. Applicable Law
This privacy policy is governed by: the EU General Data Protection Regulation (GDPR/DSGVO), the German Federal Data Protection Act (BDSG), and the Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG).
17. Contact
For privacy-related inquiries:
Email: [email protected]