← Back to FeedbackOwl

Privacy policy

Last updated: November 5, 2026

1. An overview of data protection

General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e., the “controller”)?

The data on this website is processed by the operator of the website, whose contact information is available under section “Information about the responsible party (referred to as the “controller” in the GDPR)” in this Privacy Policy.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance, be information you send us by e-mail.

Other data shall be recorded by our IT systems automatically or after you consent to its recording during your website visit. This data comprises primarily technical information (e.g., web browser, operating system, or time the site was accessed). This information is recorded automatically when you access this website.

What are the purposes we use your data for?

A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyze your user patterns. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders or other order enquiries.

What rights do you have as far as your information is concerned?

You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified or eradicated. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to log a complaint with the competent supervising agency.

Please do not hesitate to contact us at any time if you have questions about this or any other data protection related issues.

Analysis tools and tools provided by third parties

There is a possibility that your browsing patterns will be statistically analyzed when you visit this website. Such analyses are performed primarily with what we refer to as analysis programs.

For detailed information about these analysis programs please consult our Data Protection Declaration below.

2. Hosting and Content Delivery Networks (CDN)

Bunny.net

We use the content delivery network Bunny.net. The provider is BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia (hereinafter “Bunny.net”). The files of this website are stored in Germany.

Technically, the transfer of information between your browser and this website is routed through that network. This lets us serve the site quickly and reliably. The network records the IP address, which is anonymized.

Bunny.net derives the country of each request from the IP address and names it in its response. The pricing section reads it in your browser to show prices in euros in the euro area and in US dollars everywhere else. The country is not stored, not sent anywhere else and not used for anything else.

The trailer on this website is also delivered by Bunny.net, through its video service Bunny Stream. Its player is loaded only when you click “Watch the trailer”; until then the page shows a still image from our own server and no request goes to Bunny Stream. When you start it, your browser loads the player and the film from player.mediadelivery.net and Bunny’s video servers, which process your IP address and the technical data of the request in order to deliver the film. To pick the fastest server, the player also measures the response time of several Bunny locations, some of them outside the EU, and reports it to Bunny. The player sets no cookies. If you change the volume or mute the film, it remembers that setting in your browser’s storage for player.mediadelivery.net (bunny_stream_settings_…), so that the film starts the same way next time; the entry holds nothing else and stays in your browser until you clear it. This is strictly necessary for the player you started to keep the setting you chose (§ 25 (2) No. 2 TDDDG).

The use of Bunny.net is based on our legitimate interest in providing our website as error-free and secure as possible (Art. 6 (1)(f) GDPR).

You can find more information here: https://bunny.net/privacy/.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

Cloudflare

We use the “Cloudflare” service provided by Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter referred to as “Cloudflare”).

For feedbackowl.dev, Cloudflare only provides the DNS, which translates the domain name into the address of Bunny.net; your visit itself doesn’t pass through Cloudflare. Requests to the live demo at demo.feedbackowl.dev and e-mails to our address are routed through Cloudflare’s network.

Cloudflare offers a content delivery network with DNS that is available worldwide. As a result, the information transfer that occurs between your browser and the live demo is technically routed via Cloudflare’s network. This enables Cloudflare to analyze data transactions between your browser and the demo and to work as a filter between our servers and potentially malicious data traffic from the Internet. In this context, Cloudflare may also use cookies or other technologies deployed to recognize Internet users, which shall, however, only be used for the herein described purpose.

The use of Cloudflare is based on our legitimate interest in a provision of our website offerings that is as error free and secure as possible (Art. 6(1)(f) GDPR).

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details and further information on security and data protection at Cloudflare can be found here: https://www.cloudflare.com/privacypolicy/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5666.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

3. General information and mandatory information

Data protection

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

We herewith advise you that the transmission of data via the Internet (i.e., through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data processing controller on this website is:

fdmedia GmbH
Altrottstr. 31
69190 Walldorf
Germany

Phone: +49 6227 8991526 (no support)
E-mail: hello@feedbackowl.dev

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g., names, e-mail addresses, etc.).

Storage duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

General information on the legal basis for the data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if special categories of data are processed according to Art. 9 (1) GDPR. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or to the access to information in your end device (e.g., via device fingerprinting), the data processing is additionally based on § 25 (1) TDDDG. The consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest according to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.

Recipients of personal data

In the scope of our business activities, we cooperate with various external parties. In some cases, this also requires the transfer of personal data to these external parties. We only disclose personal data to external parties if this is required as part of the fulfillment of a contract, if we are legally obligated to do so (e.g., disclosure of data to tax authorities), if we have a legitimate interest in the disclosure pursuant to Art. 6 (1)(f) GDPR, or if another legal basis permits the disclosure of this data. When using processors, we only disclose personal data of our customers on the basis of a valid contract on data processing. In the case of joint processing, a joint processing agreement is concluded.

Revocation of your consent to the processing of data

A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

Information about, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data at any time. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.

Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

4. Recording of data on this website

Cookies

This website sets no cookies of its own. It uses no session cookies and no permanent cookies, and it stores nothing on your device to recognize you. Our analytics work without cookies; how Pirsch counts visitors without them is described below. There is consequently no cookie banner. The trailer player sets no cookies either (see “Bunny.net” in section 2). The live demo sets two technically necessary cookies (see section 6). Once you open the checkout, Polar and its payment provider may set their own cookies in it (see “Purchases” in section 7).

Server log files

The provider of this website automatically collects and stores information in so-called server log files, which your browser communicates automatically. The information comprises:

This data is not merged with other data sources. It is recorded on the basis of Art. 6 (1)(f) GDPR. The operator of the website has a legitimate interest in the technically error-free depiction and the optimization of the website, and server log files must be recorded to achieve this.

Pirsch Analytics

We use “Pirsch Analytics” on this website and on the live demo. The provider is Emvi Software GmbH, Nickelstraße 1b, 33378 Rheda-Wiedenbrück, Germany (hereinafter “Pirsch”). The data is processed exclusively on servers in Germany.

The Pirsch script and the data it sends run through pa.feedbackowl.dev, a subdomain of this website that points to Pirsch’s servers. It is Pirsch that receives the data, in the same way as through Pirsch’s own address. The website and the live demo report to the same statistics, the demo under its own paths.

Pirsch Analytics is a cookie-free web analytics software that was developed according to the Privacy by Design principle. To analyze visitor flows, Pirsch Analytics uses a hashing algorithm to generate a 16-digit number as the visitor ID when the page request is received. The input values are the IP address, the user agent, the date and a salt.

The visitor’s IP address is not persisted in whole or in part, and is anonymized completely and non-reversibly by the hash. The inclusion of the date and the use of one salt per website ensures that website visitors cannot be recognized for more than 24 hours and cannot be tracked across multiple websites. A rough localization (country/city) is performed via a locally integrated database.

Beyond the visitor ID, the following is recorded: the page visited (the path, not the full URL), the referrer, UTM parameters, the browser language, the time of the visit, the browser and operating system, the device type, the screen size, and the approximate location. The IP address itself is never stored.

This analysis is based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in the statistical analysis of user behavior in order to improve the website. Pirsch Analytics stores nothing on your device and reads no stored information from it; the script only passes on what your browser shares with every page anyway, such as its language and screen size. That’s why we don’t ask for consent under § 25 TDDDG and this website has no cookie banner.

You can find more information about Pirsch Analytics here: https://pirsch.io/privacy.

Data processing

We have concluded a data processing agreement (DPA) for the use of this service.

Inquiries by e-mail or telephone

If you contact us by e-mail or telephone, your request including all resulting personal data (name, request) is stored and processed by us for the purpose of handling your request. We do not pass this data on to third parties without your consent; the service providers below process it only on our behalf.

E-mails to hello@feedbackowl.dev and support@feedbackowl.dev reach us through Cloudflare Email Routing (see “Cloudflare” in section 2), which forwards them to our company mailbox. That mailbox is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, on servers in Germany. We have concluded a data processing agreement with ALL-INKL.COM in accordance with Art. 28 GDPR.

This data is processed on the basis of Art. 6 (1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for pre-contractual measures. In all other cases it is processed on the basis of our legitimate interest in the effective handling of inquiries (Art. 6 (1)(f) GDPR), or on the basis of your consent (Art. 6 (1)(a) GDPR) where it has been obtained; consent can be revoked at any time.

The data remains with us until you ask us to delete it, until you revoke your consent, or until the purpose for storing it lapses. Mandatory legal provisions, in particular statutory retention periods, remain unaffected.

5. Plug-ins and Tools

Fonts (local embedding)

This website uses the Geist typeface to ensure a uniform appearance. The fonts are installed locally on our own server. No connection to a font provider’s servers is established, and no request leaves your browser for that purpose. Your IP address is not transmitted to any third party for the loading of fonts.

6. The live demo (demo.feedbackowl.dev)

The live demo shows the package with made-up data. It’s read-only: there’s no sign-in, and you can’t post, vote or comment, so you don’t enter any personal data there. It updates itself to the newest release of the package every night.

Unlike this website, the demo runs as a Laravel app on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, managed through xCloud, behind Cloudflare’s network (see “Cloudflare” in section 2). The server records the server log files described in section 4. This is based on our legitimate interest in delivering the demo and keeping it secure (Art. 6 (1)(f) GDPR).

Like any Laravel app, the demo sets two technically necessary cookies: a session cookie (feedbackowl-demo-session) and a security token against forged requests (XSRF-TOKEN). They hold no personal data beyond a random ID and expire after two hours. They are strictly necessary to provide the demo you opened (§ 25 (2) No. 2 TDDDG, Art. 6 (1)(f) GDPR).

7. eCommerce and payment service providers

Processing of Customer and Contract Data

We collect, process, and use personal customer and contract data for the establishment, content arrangement and modification of our contractual relationships. Data with personal references to the use of this website (usage data) will be collected, processed, and used only if this is necessary to enable the user to use our services or required for billing purposes. The legal basis for these processes is Art. 6(1)(b) GDPR.

The collected customer data shall be deleted upon completion of the order or termination of the business relationship and upon expiration of any existing statutory archiving periods. This shall be without prejudice to any statutory archiving periods.

Purchases

FeedbackOwl licenses are sold by Polar (Polar Software, Inc., 3500 South DuPont Highway, Dover, DE 19901, USA) as merchant of record. When you click a buy button, Polar’s checkout opens in a window on this page (or on Polar’s own page, if you open the link in a new tab). It is loaded directly from Polar’s servers, which receive your IP address; nothing from Polar loads before that click. Polar processes the purchase and payment data (such as your name, e-mail address, billing address, VAT ID and payment method) as a controller in its own right, with Stripe as its payment provider, and may set the cookies the checkout needs to work and to prevent fraud; see https://polar.sh/legal/privacy. Opening the checkout is a step towards a contract (Art. 6 (1)(b) GDPR).

After the purchase, Polar sends you the receipt and a link to its customer portal, where you sign in with your purchase e-mail address, connect GitHub and find your orders. The portal is part of Polar’s service and is covered by Polar’s privacy policy.

To deliver and support your license, we receive from Polar your name, your e-mail address, the plan you bought and the GitHub username of the account you connect in Polar’s customer portal after the purchase. The legal basis is the performance of the contract (Art. 6 (1)(b) GDPR); the transfer to the USA is necessary for the purchase (Art. 49 (1)(b) GDPR).

Delivery through GitHub

The package is delivered by inviting your GitHub account to a private repository. For this, you connect your GitHub account in Polar’s customer portal, and Polar passes your GitHub username to GitHub (GitHub, Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA). GitHub processes your account data as a controller in its own right; see GitHub’s privacy statement. Issues and comments you post in the repository are visible to other customers with access. The legal basis is the performance of the contract (Art. 6 (1)(b) GDPR).