Privacy Policy

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

2. Data Controller

The data controller responsible for data processing on this website is:

BlockMastery
J. Hartwig
Dohlenstieg 23
15732 Schulzendorf
Email: mail@blockmastery.de

3. Data Collection on This Website

Server Log Files

When you visit our website, our web server temporarily stores each access in a log file, including IP address, date and time, page accessed, browser type, and operating system. This data is used solely for technical purposes and is automatically deleted after 7 days.

Visitor Counter

We track the number of page views for each blog post. This data is stored anonymously and is used for statistical purposes only. We use cookies to ensure each visitor is only counted once per day per blog post. The cookie contains only the current date and is deleted at midnight.

Cookies

This website uses the following types of cookies:

  • Session Cookies: Used for admin authentication. These cookies are essential for the admin functionality and are deleted when you close your browser.
  • Visitor Tracking Cookies: Used to count unique daily visitors per blog post. These cookies contain only the date of your visit and expire at midnight.

No third-party tracking cookies or advertising cookies are used on this website.

4. Data Security

We implement appropriate technical and organizational security measures to protect your data:

  • HTTPS Encryption: All data transmitted to and from our website is encrypted using SSL/TLS.
  • CSRF Protection: All forms are protected against Cross-Site Request Forgery attacks using unique tokens.
  • Rate Limiting: Login attempts are limited to prevent brute-force attacks.
  • Input Validation: All user inputs are validated and sanitized to prevent injection attacks.
  • Secure Headers: We use security headers including Content-Security-Policy, X-Frame-Options, and X-XSS-Protection.
  • Secure Cookies: All cookies are set with HttpOnly and SameSite flags to prevent unauthorized access.

5. Your Rights

According to GDPR, you have the following rights regarding your personal data:

  • Right to access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

To exercise any of these rights, please contact us at privacy@blockmastery.de.

6. Data Retention

We retain data only as long as necessary:

  • Server logs: 7 days
  • Visitor statistics: Aggregated counts only, no personal data stored
  • Session data: Until browser is closed or session expires
  • Rate limiting data: 15 minutes after last failed login attempt

7. Third-Party Services

We do not use Google Analytics, social media plugins, external fonts or CDNs. All scripts (including the ZIP library used for exports) are served from our own server. The following external services are involved:

Google AdSense (advertising)

We use Google AdSense, an advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display advertisements on this website. Google AdSense uses cookies and similar technologies to show you ads that match your interests (personalized advertising) and to measure how ads perform. In doing so, Google may process information about your device, your browser, your approximate location and your visit to this website.

For visitors from the European Economic Area, the United Kingdom and Switzerland, personalized advertising is only shown with your consent (Art. 6(1)(a) GDPR); without consent, only non-personalized ads are displayed. You can change or withdraw your choice at any time and turn off personalized advertising in Google's Ads Settings. More information is available in Google's privacy policy and at How Google uses information from sites that use its services.

Visitor statistics (besucherspiegel.de)

Our pages load a small counting pixel from www.besucherspiegel.de. Your browser transmits the address of the page you are viewing, your IP address and your browser information to this service. The purpose is anonymous, aggregated reach statistics (legitimate interest, Art. 6(1)(f) GDPR). No cookies are set by us for this.

Awin affiliate banners

Some pages show advertising banners from partners of the affiliate network Awin (AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany). When a banner is displayed, your browser loads it from Awin's servers and transmits your IP address, browser information and the page you are viewing. If you click a banner, Awin may set cookies or use similar technologies to record that the click and a possible purchase came from our website, so that we receive a commission. Tracking cookies are only used with your consent where required (Art. 6(1)(a) GDPR); otherwise the display is based on our legitimate interest in financing this website (Art. 6(1)(f) GDPR). More information: Awin privacy policy.

Amazon partner link

Some pages contain a link to Amazon (affiliate/partner link). Data is only transmitted to Amazon when you click the link; from then on, Amazon's privacy policy applies. We may receive a small commission for purchases, at no extra cost to you.

8. GeoMapping (OpenStreetMap services)

When you use GeoMapping and start a calculation, your browser sends requests directly to these OpenStreetMap services:

  • Nominatim (nominatim.openstreetmap.org, operated by the OpenStreetMap Foundation, UK) – converts the address you entered into coordinates.
  • Overpass API (overpass-api.de, operated by FOSSGIS e.V., Germany) – delivers the map data (buildings, streets, water, trees) around these coordinates.

In the process, the address or coordinates you entered as well as your IP address and browser information are transmitted to these operators. This only happens when you actively start a calculation (Art. 6(1)(a) and (f) GDPR). We do not store the addresses you enter. Privacy policies: OpenStreetMap Foundation, FOSSGIS e.V..

9. Building Templates & Editor

The Building Templates, the building generator, the 3D preview and the Custom Building Editor run entirely in your browser. Your settings and generated files (mcfunction, datapack ZIP) are created locally on your device and are not sent to our server or to third parties.

10. Former subdomains

The former addresses tools.blockmastery.de, templates.blockmastery.de and geomapping.blockmastery.de now permanently redirect to blockmastery.de. No additional data is collected by these redirects beyond the normal server log files described above.

Last updated: September 2026