Transparency

Our stack, component by component

Hosting and data storage are 100% European and all data stays within the EU. Below is exactly which party does what, and from which country.

ComponentSupplier and locationNotes

Web hostingHetzner Online GmbHGermanyAll our web applications run on servers we manage ourselves.

Storage of contact requestsOur own databaseGermanyRequests sent through the form are stored here and deleted automatically after the retention period in the privacy policy.

Admin environmentOur own softwareGermanyAccessible only with a login and two-factor authentication.

Email notificationseusendNorwayOur outgoing email is handled by this Norwegian party.

Domains and DNSmijn.host & TransIPNetherlandsThe .nl registry is SIDN (Netherlands), the .eu registry is EURid (Belgium).

TLS certificatesLet's Encrypt (ISRG)United StatesA US non-profit. It issues the certificate that encrypts the connection and processes no customer data. Issued certificates are public through Certificate Transparency.

FontsSelf-hostedGermanyInter and Plus Jakarta Sans, open source under the SIL Open Font License.

Analytics and cookiesNoneNo data trafficWe use no analytics and set no cookies.

External scripts and CDNsNoneNo data trafficAll code, styles and images are served from our own servers.

BackupsHetzner Online GmbHGermanyFull copies of the servers, including databases.

SoftwareOpen source: Ubuntu, nginx, PHP, Laravel, Filament, SQLite, AstroNo data trafficRuns entirely on our own servers. No data goes to the makers of this software.

Last updated: 3 september 2026

What this means

All client, participant and schedule data is stored and processed exclusively on servers in the EU, under the GDPR. None of the parties that process our data falls under US law such as the CLOUD Act.

The only non-European party in this list is Let's Encrypt. It issues our TLS certificate but never comes into contact with our (client) data.

If anything in this list changes, we update this page.

Questions about our approach, or is a data processing agreement needed?

Get in touch