Privacy policy

Controller

Funny Jokes is operated by dangarus. The full legal name of the provider is listed in the legal notice. The controller's detailed privacy policy with contact details, service provider information, and general mandatory information is available at https://abgehakt.eu/?p=privacy_policy. You can submit privacy requests using the contact details on funnyjokes.dangarus.de.

What data we process

Reading jokes does not require an account. If you create an account, we process your email address, password hash, login tokens, profile details such as nickname, bio, avatar, and UI preferences, as well as your own jokes, comments, ratings, favorites, follows, reports, and feedback.

For security and operation, we process technical data, for example truncated or hashed IP/rate-limit identifiers, user agent for feedback, request IDs, login and activity timestamps, and server logs.

If you upload a profile picture, the app processes the selected image only for upload, cropping, and displaying your avatar. Firebase Cloud Messaging is started in the app only after you enable notifications or if a push setting was previously stored. A device token may be processed in that case. Notifications are optional.

Purposes and legal bases

We process account, login, profile, jokes, comments, favorites, ratings, and follows to provide the app and community features on the basis of Art. 6(1)(b) GDPR.

Abuse protection, rate limits, moderation, reports, security logs, error analysis, and operational reliability are processed on the basis of legitimate interests under Art. 6(1)(f) GDPR. The legitimate interest is the secure, stable, and legally compliant operation of the app.

Push notifications and voluntary profile details are processed on the basis of your consent or voluntary provision under Art. 6(1)(a) GDPR. You can disable notifications again in the app or in the operating system.

Where statutory retention or proof obligations apply, processing is based on Art. 6(1)(c) GDPR.

Public content

Published jokes, comments, nickname, bio, and avatar may be visible to other users. Email address, password hash, and login tokens are not displayed publicly. Do not share personal data of third parties without their permission.

Recipients and service providers

Technical service providers such as hosting providers process data only to the extent required for operation, delivery, security, and error analysis. Google Firebase Cloud Messaging is used only for optional push notifications.

Further information about the controller, hosting, Google/Firebase, data processing agreements, and general third-party information is available in the overarching privacy policy at abgehakt.eu privacy policy. Data is shared with other recipients only when necessary for app features, you have consented, or a legal obligation applies.

Transfers to third countries

When using service providers such as Google/Firebase, processing outside the EU or EEA cannot be ruled out. In that case, we rely on appropriate safeguards such as EU Standard Contractual Clauses or comparable statutory mechanisms.

Retention

We generally store account data, profile information, published content, and community interactions until account deletion or until you delete individual content. Login tokens expire automatically and are cleaned up. Rate-limit data is deleted after the respective protection window expires.

Feedback, reports, moderation notes, and security logs are stored only as long as needed for support, abuse prevention, traceability, or legal claims. After the respective retention periods expire, data is deleted or anonymized.

Your rights

Subject to GDPR, you have rights of access, rectification, erasure, restriction of processing, data portability, and objection. Where processing is based on consent, you may withdraw it at any time with effect for the future.

You can permanently delete your account in the app under Settings. This removes your profile, login tokens, jokes, comments, favorites, and related account data. Under Settings, you can also export your data for data portability (Art. 20 GDPR). You can request a full response under Art. 15 GDPR by email.

You also have the right to lodge a complaint with a data protection supervisory authority. See also: Delete account.

Cookies and tracking

The public website currently does not use external analytics or advertising cookies. If tracking, advertising, or non-essential cookies are introduced in the future, a corresponding consent mechanism will be added in advance.