Privacy policy

Last updated: 6 November 2026. The German version is authoritative.

1. Controller

Aralel GmbH
Josefstr 66
52080 Aachen
Germany
Email: support@aralel.com

2. What we process and why

Browsing without an account

When you visit the site, the server processes your IP address, the requested page, date and time, and your browser's user-agent to deliver the page and protect the service against abuse (Art. 6(1)(f) GDPR). Server logs are kept for at most 14 days. We do not use advertising or tracking cookies.

Script statistics. When you open a script page, the web prompter or a script file (also from the app), we record the visit to understand which scripts are used and in which languages and regions: the script, the time, the site language and your browser's preferred language, your IP address, your browser's user-agent and what it tells us (browser, operating system, type of device), the website that linked to the page, and the approximate location (country, city, time zone) looked up from your IP address with our own location service at relay.codehospital.com. If you are signed in, the visit is linked to your account. Legal basis: our legitimate interest in improving the service and its library (Art. 6(1)(f) GDPR); you may object at any time (Art. 21 GDPR) by writing to us. Only administrators see this data; it is not shared with third parties.

Error reports. When something goes wrong on the server or in your browser, an error report is sent to our own error-tracking service (Sentry, operated by us on our servers in the EU): the error and where it happened in our code, the page address, your browser and operating system and, if you are signed in, your account number — no IP address, email address, cookies or form contents. This lets us find and fix faults (Art. 6(1)(f) GDPR). Error reports are deleted after at most 90 days.

Account and sign-in

To sign in we process your email address. With the magic link we send you a single-use link that expires after 15 minutes; with Google or Apple we receive your account identifier, email address and name from that provider. We store your email, display name, handle, language and sign-in times to provide your account (Art. 6(1)(b) GDPR).

Content you create

Scripts, revisions, collections, comments, likes and favourites are stored with your account. Public and unlisted scripts, comments and your public profile are visible to others as you choose.

Reports and moderation

When you report content we store the report, the reason and — to prevent abuse — a one-way hash of your IP address. Moderators' actions are logged (Art. 6(1)(f) GDPR, keeping the platform safe and meeting our legal duties).

3. Cookies

We only use technically necessary cookies: a session cookie that keeps you signed in and a security (CSRF) cookie. Your editor may keep an unsaved draft in your browser's local storage so nothing is lost if your connection drops.

4. Processors

• Hosting: our servers, operated with Coolify, in the EU.
• Email delivery: Resend, Inc. (USA) sends sign-in and notification emails. Transfers are covered by the EU–US Data Privacy Framework and standard contractual clauses.
• Sign in with Google / Apple (optional): Google Ireland Ltd. and Apple Distribution International Ltd., subject to their privacy policies.

5. Retention

Account data is kept while your account exists. When you delete your account, we delete your account, private scripts, favourites, likes and collections immediately; public scripts are deleted too unless you chose to keep them anonymously. Backups are overwritten within 30 days. In script statistics, IP addresses and user-agents are deleted after 90 days; the remaining details (browser, device, language, approximate location) are kept without them.

6. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and to withdraw consent. You can export all your data and delete your account in Settings. You may lodge a complaint with a supervisory authority, for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

7. The Teleprompter app

Opening a script in the app downloads the script file from this site. The app itself has its own privacy policy; it does not need an account on this site.