Privacy Policy

Name: Stefan Wintergerst
Email: wintergerst.stefan@googlemail.com
Website: stefanwintergerst.com

Harboro is hosted by Cloudflare, Inc. Cloudflare may process technical request data such as your IP address, browser type, requested page, and time of access to deliver the site securely and reliably.

Legal basis: Article 6(1)(f) GDPR, our legitimate interest in secure and reliable website delivery.
International transfers: Cloudflare may process data in the United States and other countries under its applicable transfer safeguards.

More information: Cloudflare Privacy Policy.

Harboro uses WorkOS AuthKit to create and secure user sessions. When you register or sign in, we may process your name, email address, profile information, authentication identifiers, and session information.

Purpose: Creating your account, authenticating you, preventing unauthorized access, and maintaining your session.
Legal basis: Article 6(1)(b) GDPR, performance of the service you request, and Article 6(1)(f) GDPR, our legitimate interest in protecting Harboro.

More information: WorkOS Privacy Policy.

Harboro is designed to connect services you choose, such as email, calendar, contacts, and file-storage providers. Nothing is connected without your action and authorization.

Depending on the integration and permissions you approve, Harboro may access account identifiers, email metadata and content, calendar events, contact records, file names, file metadata, and file content. Harboro processes this data only to provide the features you request, such as displaying, searching, organizing, or synchronizing your information.

You can revoke an integration through Harboro or the connected provider. The provider's own privacy policy continues to apply to data held by that provider. Harboro does not sell connected-service data or use it for advertising.

Legal basis: Article 6(1)(b) GDPR, performance of the service you request. Where a provider requires consent for a specific permission, Article 6(1)(a) GDPR also applies.

Harboro uses Convex for application data and backend functions. Convex may store account records, integration settings, synchronization state, and data needed to provide your workspace. Connected-service access credentials may also be stored where required to keep an integration working.

Purpose: Providing, synchronizing, securing, and maintaining your Harboro workspace.
Legal basis: Article 6(1)(b) GDPR and Article 6(1)(f) GDPR.

More information: Convex Privacy Policy.

Harboro uses essential session storage or cookies to keep you signed in and protect your account. These are necessary for the service to work. Your light or dark theme choice is stored locally in your browser under harboro-theme and is not used to track you.

Legal basis: Article 6(1)(b) GDPR and Article 6(1)(f) GDPR. You can clear local storage and cookies through your browser, although removing essential session data will sign you out.

Like most online services, Harboro and its infrastructure providers may record technical logs such as IP address, timestamp, requested endpoint, browser information, and error details. Logs are used for security, abuse prevention, debugging, and service reliability.

Legal basis: Article 6(1)(f) GDPR, our legitimate interest in securing and operating the service.

We keep personal data only for as long as needed to provide Harboro, meet legal obligations, resolve disputes, and maintain security. You may request deletion of your Harboro account and associated application data. Some limited records may remain in backups or where retention is required by law.

Disconnecting an integration stops future access. Data already synchronized into Harboro will be removed in accordance with your deletion request and applicable retention requirements.

Depending on the circumstances, you have the right to request access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing relies on consent, you may withdraw it at any time (Art. 7(3)).

You may also lodge a complaint with your local supervisory authority. To exercise your rights, contact wintergerst.stefan@googlemail.com.

This policy may be updated as Harboro's features, integrations, or legal obligations change. The current version and its update date will always be published on this page.