Skip to content

This English version is a translation for your convenience. Only the German version is legally binding.

// Information under Art. 13 GDPR

Privacy

In short: portslie loads nothing from third-party servers, uses no advertising or analytics technology and does not pass on data for advertising. There is exactly one cookie, and it keeps you signed in.

Controller

Maurizio Romano, c/o Impressumservice Dein-Impressum, Stettiner Str. 41, 35410 Hungen, Germany · support@mrmedia.network
No data protection officer has been appointed; the requirements of § 38 BDSG are not met.

If you only visit the site

With every request, the server writes an entry to its log: IP address, time, requested address, status code and browser identifier. This is technically necessary to deliver the site and to detect attacks. The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in secure operation. The entries are kept for 7 days and then deleted.

Cookies

A single cookie, set after you log in. It contains a random session ID and nothing else — no identifier that recognises you across other sites. It is marked HttpOnly and SameSite=Lax and expires after 30 days. Because it is strictly necessary for the service you requested, no consent is required for it (§ 25(2) no. 2 TDDDG). For the same reason, there is no consent banner here.

In addition, there is a short-lived notice cookie that carries a single message (“Gespeichert”) over to the next page and expires after 30 seconds.

If you create an account

We store: your email address, a hash of your password (never the password itself), the time of login and, for each logged-in device, its IP address and browser identifier. We need this to provide you with access — the legal basis is Art. 6(1)(b) GDPR (performance of a contract), and for the session data additionally point (f) (detecting access by others).

Failed login attempts are recorded with the email address or IP and the time for 15 minutes to slow down attacks on passwords. We keep a log of security-relevant events (login, password change, account creation) for 12 months.

What portslie additionally processes

Language

If you choose the language at the top (DE/EN), we store your choice in a cookie sprache (content only de or en, valid for one year, HttpOnly, SameSite=Lax). Without a choice, the language on your first visit follows the language setting of your browser; nothing is stored in that case. The cookie is necessary for the display you requested (§ 25(2) no. 2 TDDDG). If you are logged in, we remember the language you last used in your account so that alerts and emails arrive in the same language (Art. 6(1)(b) GDPR).

Your targets

We store the addresses you have monitored (hostname or IP address with port), a freely chosen name, the check interval and — for websites — the text that must appear in the response. Legal basis: Art. 6(1)(b) GDPR.

From our server, the address you provide is contacted regularly. The operator of the target system sees our IP address in their log. So only monitor systems you are responsible for.

Measurements

For each measurement we store the time, the level reached, the response time and — for game servers — the player count reported by the server. Outages are recorded as an incident with start and end. We delete old measurements after the retention period of your plan: 7 days (“Free”), 30 days (“Small”), 90 days (“Large”).

Alert channels

For notifications we store the email address or Discord webhook address you provide, as well as the time of the last delivery. With Discord, the message leaves our server towards Discord Netherlands B.V. — whatever you enter there as an alert channel ends up there as well. That is your decision; without an alert channel, nothing is sent.

Instant check without an account

Via /server-status-pruefen you can have an address checked once. The check type and the address you entered are passed to one of our probes (locations under Infrastructure), which queries the service once. We keep the check type, address and result in memory only and delete them after 15 minutes; they are not written to a database or a log. To limit abuse, we count checks per IP address — for this, we keep a salted hash of your IP address in memory for at most ten minutes; the salt is regenerated on every restart. Legal basis: Art. 6(1)(b) GDPR (the check you requested) and point (f) (protecting the service and third parties against abuse).

Request for a game

Using the form on /spiele you can request a game that portslie does not check yet. We store the name of the game, the selected query type and — only if you enter them — an example server, your email address and your message. We do not store your IP address for this. We use the email address exclusively to reply to this request. Legal basis: Art. 6(1)(f) GDPR (our interest in handling requests and aligning the offering accordingly). We delete the request as soon as it has been dealt with, at the latest after twelve months.

To protect against automated requests, we use Cap, open-source software that runs on our own server. No data is transmitted to third parties and no cookies are set. Your browser solves a computational task; no characteristics of your browser are read in the process. The task and the result are stored only briefly so that each confirmation is valid exactly once. Legal basis: Art. 6(1)(f) GDPR (protecting the form against abuse).

Public access via Cloudflare

Anyone who visits portslie.com (or portslie.de) reaches our server via Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare accepts the encrypted connection and forwards the request to us through a tunnel; as a result, our server has no open access point on the internet. In doing so, Cloudflare processes your IP address, the requested address, the browser identifier and the content of the request, including what you enter in forms. Cloudflare does not set any cookies or embed any scripts in the process. The legal basis is Art. 6(1)(f) GDPR (secure, reachable operation without an openly exposed server), and for logged-in use additionally point (b).

Cloudflare also processes data in the USA. Cloudflare, Inc. is entered in the official list of the EU-US Data Privacy Framework (dataprivacyframework.gov); the transfer is therefore based on the European Commission's adequacy decision (Art. 45 GDPR). In case the certification lapses, our contract with Cloudflare contains the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).

Where measurements are taken

Measurements are taken from two locations in the EU: Strasbourg (France, OVH SAS server) and Frankfurt am Main (Maincubes FRA01 data centre, Henrik Kramer e.K. server). The locations receive only what they need for measuring: address, port, check type and the expected response — neither your email address nor your alert channels.

Alert channels outside our server

You decide where an alert goes. Messages to Telegram, Slack, Microsoft Teams, ntfy or your own webhook go to the respective provider or to the address you enter; that provider's privacy terms apply there, and processing may also take place outside the EU. We only transmit because you set up the alert channel (Art. 6(1)(b) GDPR), and only the content of the notification: name and address of the target, status, time.

Paid plans

You order and pay for paid plans in the MRMedia customer portal (portal.mrmedia.network), which we operate ourselves. The MRMedia privacy policy applies there, including payment processing via Mollie B.V., Amsterdam. From the portal, portslie learns only what it needs for your plan: the email address of the portslie account, the plan, the service number, whether you requested that the service begin before the withdrawal period expires, and, for paid invoices, number, amount and period. Legal basis: Art. 6(1)(b) GDPR. The portal retains invoices in accordance with the retention periods under tax law (up to ten years, Art. 6(1)(c) GDPR).

After you order, we send you a contract confirmation with the Terms, Service description and Withdrawal notice. We store when it was sent as proof for as long as the contract exists and beyond that until the limitation period expires.

Export and deletion

Under Account you can download all data relating to your account as a JSON file at any time (Art. 20 GDPR) and delete your account yourself (Art. 17 GDPR). On deletion, we immediately remove the account together with all targets, measurements, alert channels and the status page; an entry without your email address remains in the security log. The data remains in the daily backups for up to four weeks (database backups 14 days, which in turn are kept in server backups with 14 days of retention); after that it is deleted. We access the backups only to restore data after an outage. When a paid plan ends, we keep the history at its previous scope for 30 days so that you can export it.

If you use portslie as a business

If, as a business, you enter alert addresses of your employees or other personal data, we process them on your behalf. This is governed by the data processing agreement.

Email delivery

We only send emails when the service requires it: confirming your address, resetting your password, outage and recovery messages for your targets, and for paid plans the contract confirmation. There is no newsletter and no advertising email.

Recipients

Data is not sold and not passed on for advertising purposes. Only the controller and the service providers who make operation technically possible have access:

Data processing agreements under Art. 28 GDPR are in place with these providers. Data is only transferred to countries outside the EU via Cloudflare (see “Public access via Cloudflare”) and for alert channels you choose yourself.

Your rights

An informal email to support@mrmedia.network is sufficient.

Regardless of this, you can lodge a complaint with a data protection supervisory authority — the competent authority is the one for your place of residence or that of the controller (Hesse). The list of authorities is maintained by the Federal Commissioner for Data Protection and Freedom of Information.

Automated decisions

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

Changes

If the service changes, this text changes too. The version currently in force is always available here.