Privacy policy

In short: no cookies, no tracking, no ads, and nothing is loaded from other companies. Without an account, what you enter stays in your browser. With an account, we store your email address and what you save, until you delete it.

Who is responsible

Hosting

Dry Spin runs on a server rented from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in the EU. Hetzner processes data only on our behalf, under a data processing agreement (Art. 28 GDPR). No data leaves the EU.

Visiting the site

To send you the pages, the server necessarily receives your IP address and the usual details your browser sends (such as the page requested and the browser type). The web server doesn’t keep access logs.

Requests to the account service (signing up, signing in, saving) are logged with IP address, time, address requested, result and browser type, and these logs are deleted after 5 days. Repeated sign-in attempts from one IP address are briefly limited. Both protect accounts from attacks and help fix errors, which is our legitimate interest (Art. 6(1)(f) GDPR).

Storage in your browser

Dry Spin uses no cookies. It uses your browser’s local storage for two things: what you enter as a guest (body measurements, bikes, setups, settings), and, when you’re signed in, the token that keeps you signed in. Both stay on your device, are only used for the features you use, and are needed for them (§ 25(2) no. 2 TDDDG), so no consent is asked. You can clear them in your browser settings at any time.

Accounts

An account is optional. If you create one, we store:

• your email address and your password, the password only as a secure hash;
• what you save: height, inseam and any body lengths you enter, the bikes, sizes and setups you look at, your unit and view settings;
• when the account and your saved data were created and last changed.

We use this only to provide your account (Art. 6(1)(b) GDPR). It isn’t shared with anyone or used for anything else. In the account dialog you can export everything as a file, and delete your account: that removes it and all saved data from the service straight away. Copies in server backups are overwritten within 7 days.

Share links

A share link contains the compared bikes, setups and the body measurements they need, in the part of the link after “#”. Browsers don’t send that part to the server, so we never receive what you share. Anyone you give the link to can see those measurements, but not your name or email address.

Ko-fi

The “Consider supporting” link opens our page on ko-fi.com in a new tab. Nothing is loaded from Ko-fi and nothing is sent to Ko-fi while you use this site. Only when you click the link does your browser connect to Ko-fi, and from then on Ko-fi’s own privacy policy applies. We only learn who supported us if you choose to share that on Ko-fi.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on legitimate interest (Art. 15–21 GDPR). Write to hey@dryspin.bike. You can also complain to a data protection authority, for example the one responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf.

There is no automated decision-making or profiling.

Last updated 14 September 2026