Privacy policy
1. Controller
Steffen WentzelAm Streubicht 14C91189 RohrDeutschlandE-mail: hallo@picklepilot.de
2. Principle
pickle (picklepilot.de, also reachable via picklepilot.org) is a scheduling poll without accounts or ads. The website itself uses no tracking; only the optional e-mails contain the delivery service's open and click tracking (section 5). Only the data needed for a poll is processed.
3. Data we process
- When creating a poll: title, optional description, proposed dates and settings. Optionally your e-mail address if you want the links sent to you.
- When voting: the name you enter and your votes. Optionally your e-mail address if you want your personal link sent to you.
- Technical: random access keys for the links (share, manage, personal link) and timestamps.
Names and votes are visible to everyone who knows the poll link. In anonymous polls, participants only see totals; the poll creator also sees names and individual votes via the management link.
The legal basis is Art. 6(1)(b) GDPR (providing the requested service) and Art. 6(1)(f) GDPR for secure operation.
4. Hosting and server logs
pickle runs on Cloudflare Workers; data is stored in a Cloudflare D1 database. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit, Cloudflare processes technically necessary connection data such as your IP address to deliver the site and protect it from attacks (Art. 6(1)(f) GDPR). Storage and processing exclusively within the EU is not guaranteed; a transfer to the USA is possible. Cloudflare bases such transfers on the EU-US Data Privacy Framework and standard contractual clauses.
5. E-mail delivery
If you enter an e-mail address, pickle sends you the links once via the delivery service Brevo (Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany) as a processor. pickle does not store the address in its database; it is only used for this delivery. Brevo processes the address and the content of the e-mail (poll title and links) to deliver it and keeps delivery logs according to its own retention periods. Brevo also uses sub-processors outside the EU, for example in the USA and India, and bases such transfers on standard contractual clauses or the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(b) GDPR. To prevent abuse, pickle limits the number of e-mails per IP address; Cloudflare counts the requests briefly for this purpose.
Brevo measures whether the e-mails are opened and whether their links are clicked. For this, the e-mails contain an invisible image, and the links pass through a redirect under mails.picklepilot.de. Brevo records IP address, time and an open and click log. pickle uses this to check delivery and detect abuse, not for advertising or profiles. The legal basis is Art. 6(1)(f) GDPR. If your e-mail program does not load images, opening is not recorded.
6. Contact by e-mail
If you write to hallo@picklepilot.de, Cloudflare (see section 4) forwards the message via its Email Routing service to a mailbox at Google (Google Ireland Limited, Dublin, Ireland); a transfer to the USA is possible here as well. We process your address and the content of your message to answer it (Art. 6(1)(f) GDPR; for requests concerning your rights Art. 6(1)(c) GDPR). We delete the message once the request is settled and no statutory retention obligation applies.
7. Cookies
pickle only sets one technically necessary cookie, NEXT_LOCALE, which stores the selected language for the session. There are no analytics or advertising cookies. Fonts are served by pickle itself, not by Google.
8. Retention
Polls are deleted automatically 12 months after their latest proposed date, together with all names and votes. You can request earlier deletion by e-mail at any time; the poll creator can also remove participants directly.
9. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Write to the e-mail address above and include the link to the poll concerned. You may also lodge a complaint with a data protection supervisory authority.
Last updated: 2026-10-31