Privacy Policy

1. Controller

The controller within the meaning of the GDPR is:

2. Hosting

Both openpls.app and cloud.openpls.app are hosted on Google Firebase Hosting (Google Ireland Limited, Dublin). Server logs (IP, timestamp, URL, status, user agent, referrer) are processed on the legal basis of Art. 6 (1) lit. f GDPR.

3. Cookies

The marketing site does not use tracking cookies or third-party analytics. The app uses strictly necessary cookies/local storage for sign-in and language preferences.

4. App registration

Using the cloud app requires a user account. Email, display name, optional affiliation, hashed password and account timestamps are processed under Art. 6 (1) lit. b GDPR.

5. Processors

• Google Ireland Limited - Firebase Hosting, Auth, Firestore, Storage, Functions, Cloud Run.
• Resend, Inc. - transactional email delivery.
• Functional Software, Inc. (Sentry) - pseudonymous error monitoring.

6. Product-related communication

If you explicitly consent during registration or later in your account settings, we may occasionally send you emails about new features, feedback surveys, and community activities around OpenPLS. Legal basis: Art. 6 (1) lit. a GDPR (consent). You can withdraw consent at any time via the "Product updates" switch at cloud.openpls.app/account, the unsubscribe link in any such email, or a message to hello@openpls.app. Transactional emails (verification, password reset, project invitations) are unaffected.

7. Your rights

You have the right to access (Art. 15), rectification (16), erasure (17), restriction (18), portability (20), objection (21), and to lodge a complaint with a supervisory authority (77 GDPR). For requests, write to hello@openpls.app.

The legally binding privacy policy is the German version at openpls.app/de/datenschutz.

Last updated: July 2026