Privacy policy
Last updated: October 18, 2026. This is a translation; the German Datenschutzerklärung is the binding version.
Controller
Paul Kasten
Kollwitzstraße 76
10435 Berlin
Germany
Email: hello@shadowcursor.com
In short
This website sets no cookies, uses no analytics or tracking tools and loads nothing from third-party servers. Fonts, images and videos are served from our own server.
Hosting and server logs
The website is hosted by Railway Corporation, 548 Market St, PMB 68956, San Francisco, CA 94104, USA. For every request the server processes technically necessary data: IP address, date and time, requested address, amount of data transferred, referrer and your browser's identifier. This serves the secure and stable operation of the website (Art. 6(1)(f) GDPR). The logs are used only for troubleshooting and security, are not combined with other data and are deleted when Railway's retention period ends. A data processing agreement (Data Processing Addendum) with Railway is in place. Transfers to the USA are based on the EU-US Data Privacy Framework, under which Railway is certified, and on the European Commission's Standard Contractual Clauses.
DNS
Name resolution for shadowcursor.com is provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare processes the queries of DNS resolvers to return our server's address (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework.
Contact by email
If you write to us, we process your address and your message to answer you (Art. 6(1)(b) and (f) GDPR). We delete the data once your request is settled and no statutory retention period applies.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Write to hello@shadowcursor.com. You can also lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.
The app
This policy covers the website. The ShadowCursor app gets its own policy before the download opens.