Privacy policy

Last updated: 8 October 2026

Who is responsible

This privacy policy applies to hibernator.io and docs.hibernator.io. Hibernator is a product of cirriton GmbH. In this policy, "we" is cirriton GmbH, the controller according to the GDPR:

cirriton GmbH
Gerstäckerstr. 112
81827 München
Germany

Email for privacy questions: datenschutz@cirriton.de. The imprint has all provider details.

Hosting and delivery

We host both sites at bunny.net:

BunnyWay, informacijske storitve d.o.o.
Dunajska cesta 165
1000 Ljubljana
Slovenia

The files of the sites are in bunny.net data centers in Germany and Sweden. Only bunny.net servers in EU member states deliver the pages, also when you visit from outside the EU. The data of your visit does not leave the EU.

To deliver a page, bunny.net processes your IP address, the time of the request, the address of the page and the details that your browser sends, for example the browser type and the operating system. The server keeps this data in memory for at most 30 seconds. Then it sends the data to the central processing service of bunny.net in the EU.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a secure, fast and reliable delivery of the sites. You do not have to give us this data, but without your IP address the server cannot send you a page.

We have a data processing agreement with bunny.net according to Art. 28 GDPR. bunny.net processes the data only on our instructions.

Access logs

Access logging is off for both sites. bunny.net keeps no access log.

We turn logging on only for a short time to find a technical fault. During that time, bunny.net stores each request with the full IP address and deletes it after 3 days. We see the logs only without the IP address. We do not forward the logs, and we do not keep them.

bunny.net counts the requests and the transferred data for us, also per country. These statistics contain no personal data.

No cookies, no analytics

The sites set no cookies and use no analytics or tracking tools. The pages load no content from other providers, also no fonts.

Storage in your browser

docs.hibernator.io keeps two settings in your browser:

• Local Storage, entry starlight-theme: the color theme that you select. The entry stays empty until you select one.
• Session Storage: the sections of the navigation that are open. Your browser deletes it when you close the tab.

This data does not leave your device. The storage is strictly necessary for these functions (§ 25(2) no. 2 TDDDG). hibernator.io keeps nothing in your browser.

Search

The search on docs.hibernator.io runs in your browser. For a search, your browser loads parts of the search index from docs.hibernator.io. It does not send your search terms to a server.

Contact by email

When you send us an email, we process your address, your message and the data in it to answer you. The legal basis is Art. 6(1)(b) GDPR when your message is about a contract, and Art. 6(1)(f) GDPR in all other cases. Our legitimate interest is to answer you. We keep the email until your request is complete, and after that for as long as commercial and tax law tells us to keep it.

Our email runs on Microsoft 365. The processor is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. We have a data processing agreement with Microsoft according to Art. 28 GDPR. Microsoft stores and processes our email in the EU (EU Data Boundary). If Microsoft Corporation in the USA gets access to it, the EU-U.S. Data Privacy Framework applies (Art. 45 GDPR). Microsoft Corporation is certified under it.

Your rights

You have these rights for your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)

To use a right, send an email to datenschutz@cirriton.de. We make no automated decisions about you, and we do no profiling.

Right to object

When we process your data on the basis of Art. 6(1)(f) GDPR, you can object at any time, for reasons that come from your particular situation (Art. 21 GDPR). We then stop the processing. The exceptions: we show compelling legitimate grounds that override your interests, rights and freedoms, or we need the data to establish, exercise or defend legal claims.

Right to lodge a complaint

You can complain to a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live, where you work or where the infringement took place. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany