Privacy policy
Last updated: October 25, 2026
Cropstar processes as little personal data as possible. There are no analytics or tracking tools, no advertising and no embedded social media content. Fonts and icons are served from our own server.
Controller
Johannes Pfennigbauer
Handelskai 102–112, 1200 Vienna, Austria
Email: j.pfennigbauer@proton.me
Visiting the website
To deliver the website, our server processes technically necessary data from your browser: IP address, time of the request, requested address, and browser and system information. This data is used only to deliver the pages and to keep the server secure, and is not combined with any other data. It is processed only for the duration of the request. We do not keep an access log with IP addresses.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation).
Hosting
The website and the app run on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in the Falkenstein data centre (Germany). Hetzner processes the data solely on our behalf (Art. 28 GDPR). The data does not leave the European Union.
Contact by email
If you email us, we process your address and the content of your message in order to reply. The mailbox is operated by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland. Switzerland is covered by an adequacy decision of the European Commission (Art. 45 GDPR). The message is deleted once it has been dealt with and no statutory retention obligation applies.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in answering enquiries), or (b) if your enquiry concerns a contract.
Account in the Cropstar app
Accounts are currently available by invitation only. For your account we store your email address and an encrypted password (as a hash, never in plain text). In the app you also record data about your farm, such as the farm name, AMA farm number, field and plot boundaries, tasks and completed operations.
We use this data solely to provide the app to you. It is not shared, not sold and currently not used to train models. Should that become possible in the future, it will only happen with your explicit consent per dataset, revocable at any time and without location data.
You can delete your account at any time in the app under “Account”. This deletes your account data and every farm in which you are the only member. In farms you share with others, the entries you recorded remain but are no longer linked to an account. You can also delete a farm, including all its fields, plots and tasks, yourself at any time.
Legal basis: Art. 6(1)(b) GDPR (providing the app you want to use).
Cookies and local storage
We only store what is strictly necessary for the service to work (§ 165(3) of the Austrian Telecommunications Act 2021). No consent is required for this, which is why there is no cookie banner.
| Name | Type | Purpose | Duration |
|---|---|---|---|
cropstar_session | Cookie | keeps you signed in after signing in | until you sign out, at most 30 days |
| last selected farm | browser local storage | reopens the farm you last worked with | until you clear it in your browser |
nuxt-color-mode | browser local storage | remembers light or dark mode | until you clear it in your browser |
Maps (basemap.at)
The map in the app loads aerial images and map tiles from basemap.at, a service of the Austrian federal states led by the City of Vienna. Your browser transmits your IP address to the City of Vienna's server (mapsneu.wien.gv.at), since the tiles cannot be delivered otherwise. This only happens when you open a map in the app.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a base map for field management).
Your rights
You have the right to access, rectification, erasure and restriction of processing, to data portability, and to object to processing based on legitimate interests. Just write to j.pfennigbauer@proton.me.
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria, this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.
The German version of this page is legally binding.