Privacy policy

1. Data controller

2. Website delivery and hosting

When you visit this website, connection data needed for its operation is transmitted to the hosting provider. This may include your IP address, the date and time of access, the file requested, the amount of data transferred, browser type, operating system and the page visited previously. This processing is necessary to provide the website securely and reliably. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is the secure and functional operation of this website.

3. Visitor statistics with GoatCounter

I use GoatCounter to understand how my stories are used and to improve the content and usability of this website. Statistics are active when the published website is opened. There is no statistics prompt before you can access the site.

This integration respects a Do Not Track or Global Privacy Control signal sent by your browser. When either signal is present, GoatCounter is not loaded and no statistics are sent to it. The website remains fully usable.

I record page views, selected reading modes, audio starts and listening progress, clicks to open or download individual colouring pictures, and successfully submitted star ratings. URL query parameters, scene fragments, names and text input are not transmitted. For referring websites, only the referring domain is transmitted.

GoatCounter is operated by Martin Tournoij in Ireland and, according to the provider, stores data with Hetzner in Germany and Finland. Your IP address is technically processed when connecting; according to the provider, neither the IP address nor the full browser identifier is stored permanently in the statistics. For temporary visitor recognition, the provider processes the IP address and browser identifier in memory for up to eight hours. The statistics do not use tracking cookies. Information about browsers, operating systems and countries may be analysed in aggregate. No advertising profiles are created.

Processing for data-minimising audience measurement is based on my legitimate interest in understanding and improving the use and quality of the website (Article 6(1)(f) GDPR). You can object by using the browser signals described above. Aggregated statistics are used for longer-term analysis of the website. I can delete them in my GoatCounter account. After deletion, the provider may retain backups for up to 30 days. More information: GoatCounter privacy policy. Optional story ratings submitted through Netlify remain available independently of the statistics.

4. Optional story ratings

Visitors can optionally rate a story with one to three stars. Only the selected number of stars, the name of the story rated and the time of submission are stored. No name, email address or free-text response is requested. The analysis helps me improve the stories I offer. The legal basis is Article 6(1)(f) GDPR.

5. Contact by email and contact form

The contact form processes the selection “adult / child” and the message, along with an optional first name or nickname and email address. The form is submitted through Netlify Forms, a service of Netlify, Inc., USA. Entries are stored there for handling and may be forwarded as email notifications to hallo@leoswuselwelt.de. Data may also be processed in the USA. Message contents are not sent to GoatCounter. Children should not include their address, school, phone number or other confidential details. They can ask a parent to help them provide an email address for a reply. Further information: Netlify privacy policy

If you contact me by email, the information you provide is processed to respond to your enquiry. Depending on its content, the legal basis is Article 6(1)(b) or (f) GDPR. The information is deleted once it is no longer needed to handle your enquiry, unless statutory retention obligations require otherwise.

6. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You may also lodge a complaint with a data protection supervisory authority. For North Rhine-Westphalia, this is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

7. Last updated

October 2026