Privacy Policy
Last updated 10 October 2026
This policy explains what personal data hetshield processes, why, and on what legal basis. Controller within the meaning of the GDPR is Dominik Geimer, Heiderhöfen 19, 46049 Oberhausen, Germany, reachable at mail@hetshield.com.
What we process
|
Data
|
Why
|
Legal basis
|
|---|---|---|
| Your email address and password, or your passkey | To create and secure your account | Art. 6(1)(b) — performance of a contract |
| Your Hetzner API token, encrypted at rest | It is the only way to run an export. Used only while a run is in progress | Art. 6(1)(b) |
| Server names, sizes, locations and the resource ids of what a run created | To run the export, to bill it, and to delete every resource afterwards | Art. 6(1)(b) |
| The exported disk image | It is the product. Stored only until the download link expires | Art. 6(1)(b) |
| Server log data: IP address, time, request | To operate the service securely and diagnose faults | Art. 6(1)(f) — legitimate interest |
| A daily, irreversible hash of your IP address and browser on the public pages | To count visitors without cookies. Deleted after 90 days | Art. 6(1)(f) |
The exported image
An exported disk image is a copy of your server, and it may contain personal data belonging to other people — your customers, your users, your employees. With respect to that content we act as a processor on your instruction: we do not open it, index it, analyse it, or hand it to anybody.
The image is written from the temporary machine in your Hetzner project straight to object storage. It does not pass through our application. It is stored in the European Union, is reachable only through a signed link that is not listed or indexed anywhere, and is deleted when that link expires seven days after the export completes — or earlier, when you delete it from your export page.
Who else is involved
Hetzner Online GmbH, Gunzenhausen, Germany — hosting of this application and the object storage the export is written to. Servers in the European Union.
Paddle.com Market Ltd — payment processing. Paddle is the Merchant of Record for every order and processes your payment and billing data under its own privacy policy.
We count visits to the public pages ourselves, without cookies: each visit is stored as the page, the referring site, the campaign tag of the link you followed if it carried one (the utm_source parameter, reduced to a short word such as "hn"), and a hash of the day, your IP address and your browser that cannot be turned back into either, and is deleted after 90 days. Nothing is counted behind the login. We use no third-party analytics, no advertising or tracking services, and we set no cookies beyond the session cookie that keeps you signed in and the token that protects forms against cross-site request forgery. None of this needs consent.
How long we keep things
The exported image: seven days after the export completes, then deleted — or earlier, when you delete it from your export page. Your API token: until you disconnect it or delete your account, whichever comes first. Your account and its export history: until you delete the account. Invoices and the records tax law requires us to keep: as long as German commercial and tax law requires, which is up to ten years.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. Write to mail@hetshield.com and we will answer.
You may also complain to a supervisory authority. The one responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.