Privacy Policy

Who we are

The company behind Kirby CMS and the responsible data controller for this website is the Content Folder GmbH & Co. KG.

Content Folder GmbH & Co. KG
Böhmer Weg 22
69151 Neckargemünd
Germany
Email: support@getkirby.com

Our general manager responsible for data protection is Bastian Allgeier.

You can contact us any time via email or the postal address above, if you have questions about our privacy policy.

How we collect data

This is an overview of how we handle your personal data. Please see the sections below for further details.

On this website

https://getkirby.com (including subdomains not mentioned otherwise)

We don't collect any personal data of our website visitors except server logs. We use the following third parties to improve our website performance:

KeyCDN:
To speed up access to our site across the globe and to reduce the image file size
Algolia:
To provide a really good search experience for our website and documentation

If you voluntarily contribute website content such as plugin profiles, cookbook recipes or an entry on our community map, we use the personal data in such content for display on this website according to the respective purpose.

In our licensing hub we keep licensing information to enable license activations and upgrades and to check the license status of Kirby projects.

Personal Demo

The Personal Demo you can access from the Try page stores a shortened hash of your IP address to protect you against cross-site scripting attacks (known as XSS attacks) and to prevent the creation of too many demo instances per user.

The demo server temporarily stores content that you enter in your demo instance. This data is completely deleted when the demo instance expires or when you delete your instance manually.

Other personal data except server logs is not collected by the Personal Demo.

Shop

https://getkirby.com/buy

Our shop is provided by Paddle. They collect the data about your purchases.

Forum

https://forum.getkirby.com

Our support forum is provided by Discourse. Your personal data in the forum is collected on their servers.

Feedback Platform

https://feedback.getkirby.com

Our feedback platform is provided by Nolt. Your personal data on the feedback platform is collected on their servers.

Emails

All emails sent to and from the getkirby.com domain (except newsletters) are processed by our email hosting provider Fastmail.

https://getkirby.com/kosmos

If you sign up to our newsletter, your data is being collected by our newsletter service Newstroll.

Your rights

GDPR is all about your rights as users and we think this is great! You can exercise your rights by sending us an email at support@getkirby.com.

You can access information on all data stored about you

You have the right to be ‘forgotten’ by us

Let us know and we will delete all your personal data that we store.

You have the right to correct any personal data stored about you

If there's any personal data about you that should be corrected by us, please let us know.

If you subscribed to our Kosmos newsletter, you can unsubscribe at any time. You can do this on your own with the unsubscribe link in each of our newsletters. But we are also happy to do this for you if you want. Just let us know.

If you created an account in our forum and no longer want to use it, we will anonymize your profile on your request. All your personal data (username, email address and user profile) will then be deleted. If you prefer to have all of your anonymized posts deleted as well, please let us know.

The same applies to any personal website content you have contributed, such as plugin profiles, cookbook recipes or an entry on our community map. If you'd like us to remove your personal data in such content, please let us know.

You have the right to port your data to another service

We will give you a copy of your data in a plain text format so that you can provide it to another service.

You have the right to file a complaint regarding our use of your data

Please tell us first, so we have a chance to address your concerns. If we fail in this, you can address any complaint to your national data protection authorities.

Website

License information

Our license hub at https://hub.getkirby.com keeps the information about Kirby licenses. We only store the information that is necessary to enable license activations and upgrades and to check the license status of Kirby projects. Specifically we store the customer's email address, the order number(s), the license type(s) and license code(s), the dates of purchase and first activation, the activated website domain(s) and upgrade status.

We collect this data during the checkout and activation processes. We delete the data as soon as it is no longer needed for the mentioned purposes (for example when a license is terminated).

The basis for data processing is Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.

Contributed content

We collect the content via clearly labeled forms on our website or via contributions to the website's source code. We delete your personal data on your request or as soon as the content is no longer relevant for its purpose.

The basis for data processing is Art. 6 (1) (a) GDPR, which allows the processing of data with your consent.

Cookies

Our website does not set any cookies by default. Cookies are only set as first-party cookies by the shop when visiting the "Buy" page or when using an affiliate link to visit our website.

The basis for data processing is Art. 6 (1) (f) GDPR, which allows the processing of data for the purposes of our legitimate interests, in this case to optimize the licensing experience.

Analytics and tracking

We do not use any trackers, social media buttons or analytics services on our website.

TLS transport encryption

This site uses TLS transport encryption to protect the transmission of sensitive data and prevent manipulation by eavesdroppers. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and when the lock icon is displayed in your browser's address bar.

If TLS transport encryption is activated, the data you transfer to us cannot be read by third parties.

Hosting

The servers for our website are provided by:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

Hetzner complies with GDPR. The servers are located in their data center in Nuremberg, Germany. You can find their privacy policy here: https://www.hetzner.com/legal/privacy-policy/

We use the services of Ploi to manage our servers:

Ploi
Amperestraat 16J, 3861NC
Nijkerk
Gelderland
The Netherlands

Ploi complies with GDPR. You can find their privacy policy here: https://ploi.io/privacy-policy

Server log files

We automatically collect and store information that your browser transmits to us in "server log files" on our Hetzner servers. These are:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data will not be combined with data from other sources.

The basis for data processing is Art. 6 (1) (f) GDPR, which allows the processing of data for the purposes of our legitimate interests, in this case to ensure network and information security.

Third-party services

We use the following third-party services to improve the performance and usability of our site:

KeyCDN

We use a content delivery network to provide faster access to our CSS, JavaScript, images and font files from anywhere around the world. Our CDN is provided by:

proinity LLC (KeyCDN)
Reichenauweg 1
8272 Ermatingen
Switzerland

KeyCDN complies with GDPR. You can find their privacy policy here: https://www.keycdn.com/privacy

Algolia

Our site-wide search is running on a third-party search service. We index only the content that is already publicly available on our site in order to make it searchable for you. The search is provided by:

Algolia SAS
55 Rue d’Amsterdam
75008 Paris
France

Algolia complies with GDPR. You can find their privacy policy here: https://www.algolia.com/policies/privacy/

Personal Demo

Cookies

Like any Kirby website, the demo instances set a session cookie when you log in to the Panel. You can read more about this in our privacy guide.

The demo server also sets a first-party cookie to remember your current demo instance to allow you to get back to your personal demo while it is active.

We do not set cookies for any other purpose.

The basis for data processing is Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract, in this case to ensure the functionality of the demo.

IP address

Our demo manager software at https://trykirby.com temporarily stores the IP address of the user who created the demo instance. We need it to protect you against cross-site scripting attacks (known as XSS attacks) and to prevent the creation of too many demo instances per user.

Because the IP address is stored as a shortened hash only, we cannot convert it back to the actual IP address.

The IP address is collected during the creation of the demo instance and deleted when the demo instances expires or when you delete your instance manually.

The basis for data processing is Art. 6 (1) (f) GDPR, which allows the processing of data for the purposes of our legitimate interests, in this case to ensure network and information security.

Content

The demo server temporarily stores content that you enter in your demo instance. This data is completely deleted when the demo instance expires or when you delete your instance manually.

Analytics and tracking

We do not use any trackers in the Personal Demo.

TLS encryption

Like with our website, connections to the Personal Demo are always encrypted with TLS. See the section on our website's TLS encryption for more details.

Hosting

The servers for the Personal Demo are provided by:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

Hetzner complies with GDPR. You can find Hetzner's privacy policy here: https://www.hetzner.com/legal/privacy-policy/

To ensure good performance of the demo, we use multiple server zones, currently in Nuremberg, Germany and Hillsboro, USA. When you create a new demo instance, your web browser automatically selects the server with the lowest latency – commonly the server physically closest to you.

We use the services of Ploi to manage our servers:

Ploi
Amperestraat 16J, 3861NC
Nijkerk
Gelderland
The Netherlands

Ploi complies with GDPR. You can find their privacy policy here: https://ploi.io/privacy-policy

Server log files

We automatically collect and store information that your browser transmits to us in "server log files" on our Hetzner servers. These are:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address
PHP errors that may occur in the demo

This data will not be combined with data from other sources.

The basis for data processing is Art. 6 (1) (f) GDPR, which allows the processing of data for the purposes of our legitimate interests, in this case to ensure network and information security.

Third-party services

We use the following third-party service to improve the performance and usability of the Personal Demo:

KeyCDN

We use a content delivery network to provide faster access to our CSS, JavaScript, images and font files from anywhere around the world. Our CDN is provided by:

proinity LLC (KeyCDN)
Reichenauweg 1
8272 Ermatingen
Switzerland

KeyCDN complies with GDPR. You can find their privacy policy here: https://www.keycdn.com/privacy

Shop

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns.

Paddle.com Market Limited
Judd House
18-29 Mora Street
London, EC1V 8BT
United Kingdom

Paddle complies with GDPR. You need to agree to their terms of service and privacy policy whenever you buy a license. We don't store your billing data anywhere else. You can find Paddle's privacy policy and the addresses of Paddle's EU and USA branches here: https://paddle.com/privacy/

Feedback Platform

Our feedback platform is provided by Nolt:

Nolt Software Inc.
6D - 7398 Yonge St. Unit # 320
Thornhill, L4J 8J2
Ontario
Canada

Nolt is GDPR compliant. You can find the privacy policy of Nolt here: https://nolt.io/help/privacy

Support Forum

Our support forum is running on an open-source forum software called Discourse and the hosting is provided by the company behind the forum software, Civilized Discourse Construction Kit, Inc. The company's EU representative is:

M. Régis Hanol
Civilized Discourse Construction Kit, Inc.
78 Allée Primavera
Centre UBIDOCA, 15232
Pringy
74370 Annecy
France

The hosted Discourse forum is GDPR compliant. You can find the privacy policy of Discourse here: https://meta.discourse.org/privacy

Emails

All emails sent to and from the getkirby.com domain (except newsletters) are processed by our email hosting provider Fastmail:

Fastmail Pty Ltd
PO Box 234
Collins Street West
VIC 8007
Australia

Fastmail is GDPR compliant. You can find the privacy policy of Fastmail here: https://www.fastmail.com/privacy/

You can sign up to our monthly Kirby Kosmos newsletter to receive updates about Kirby, plugins, themes and other news around Kirby and the web. We never sign you up automatically. You have to use the sign up form on our website or during the Paddle checkout and confirm your subscription with the double-opt in process. To sign up we require and verify your email address and you can provide an optional name.

All subscriber data is collected by the German newsletter service Newstroll:

NEWSTROLL
Marco Ahrendt
Maustäle 18
72793 Pfullingen
Germany

Newstroll offers analytics tools to check if newsletters have been opened and links have been clicked. We have disabled tracking on the subscriber level and only get access to the analytics for the entire list of subscribers. We only use those analytics to check how interesting and relevant our newsletters are over time. We never use them to analyze individual subscribers.

You can unsubscribe from our newsletter at any time. This can be done by using the unsubscribe link in every newsletter or by sending an email to support@getkirby.com and we will handle it for you.

Newstroll complies with GDPR. You can find our more about their privacy policy on their site (German): https://www.newstroll.de/datenschutz/

Your Kirby installation

On your own Kirby-powered websites, you or your clients are their own data controllers and fully responsible for complying with applicable privacy legislation. While Kirby is designed with privacy in mind, there are some situations in which user privacy might be affected. Head over to our privacy guide to learn more.

Questions & Feedback

We try to keep our privacy policy as transparent and easy to understand as possible. Please let us know if we can improve it further or if you have any other questions: support@getkirby.com

Updates

We will regularly check and update this privacy policy if necessary.
Last update: April 4, 2024