Overview › Privacy
Last updated: 27 September 2026
orangedeck.dev is operated by Werner Mathias Bundschuh, an Individual Entrepreneur registered in Georgia (see the legal notice). This page describes which personal data is processed when you visit this site or use the OrangeDeck application, why, and what your rights are. It is written to meet both the EU General Data Protection Regulation (GDPR) and the Georgian Law on Personal Data Protection.
The site is served by Cloudflare Pages. When you open a page, Cloudflare processes technical access data: your IP address, the browser's user agent, the page requested, the referring page and the time. This is needed to deliver the site and to protect it against abuse.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in a secure and working website. Processor: Cloudflare, Inc., USA, under Cloudflare's data processing agreement with Standard Contractual Clauses. I do not evaluate these logs myself.
This site sets no cookies, stores nothing in your browser and uses no analytics, no tracking pixels, no advertising and no external fonts. That is why there is no cookie banner.
The moving view at the top of the start page loads its data directly from your browser, not through a server of mine:
Like with any request on the web, these services receive your IP address, your browser's user agent and the time of the request. No other data is passed on to them. They process it as independent controllers under their own privacy policies (mempool.space, binance.com, bybit.com).
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in showing what the application does with live data. If your browser has JavaScript switched off or asks for reduced motion, no connection is made and a still image is shown instead.
The download buttons lead to the release files on GitHub, and the F-Droid repository at fdroid.orangedeck.dev is served by GitHub Pages. When you download a file or your F-Droid client checks for updates, GitHub, Inc. (USA) processes your IP address and the request data. See the GitHub General Privacy Statement.
The start page lists ways to support OrangeDeck with bitcoin. Clicking "Create address" fetches a fresh receiving address through Cloudflare. Only the access data listed above under "Hosting and server logs" is involved. I do not store who received which address and cannot link an address to a visitor.
The payment itself goes through your own wallet, not through this site. On-chain payments are public in the Bitcoin blockchain. Lightning payments reach my wallet through a node run by ACINQ SAS (France), which sees the amount and the time but not who pays. For the name ₿…@orangedeck.dev your wallet looks up a DNS record answered by Cloudflare; nothing is sent to me.
From a donation I only learn the amount, the time and any message you choose to attach. I keep records of incoming payments as far as tax rules require. Legal basis: legitimate interest in accepting donations and recording them properly (Art. 6(1)(f) and (c) GDPR).
If you write to [email protected], your message and address are stored in my mailbox at Proton AG, Switzerland, a country with an EU adequacy decision. I use them only to answer you and delete them when they are no longer needed, as a rule after six months. Legal basis: Art. 6(1)(b) and (f) GDPR.
The application sends nothing to me. It has no account, no analytics, no crash reports and no server of its own. Your settings and miner addresses stay on your device.
To show its data it connects to:
The optional service on Linux listens only on your own computer unless you change that yourself.
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest, and the right to lodge a complaint with a supervisory authority. To exercise them, write to [email protected]. I will answer within 30 days.
Supervisory authority for the operator: Personal Data Protection Service of Georgia. Visitors from the EU may also contact the data protection authority in their country.
If the site or the application changes how data is processed, this page is updated and the date at the top changes.
