Privacy policy

Applies to hofknecht.eu and all pages below it, and to the program SystemTrayMenu. This English version is a courtesy translation; the German version is binding.

In short

This website uses no tracking, no analytics and no advertising, and loads no content from other servers: no external fonts, videos or scripts. Cookies are only set after signing in (internal account, Share). Only when paying in the shop do you switch to the payment service Stripe.

Controller

Markus Hofknecht
Benediktbeurer Ring 14a, 86929 Penzing, Germany
Email: Markus@Hofknecht.eu

Server and logs

The website runs on the controller’s own server in Germany. The domain is registered with STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, which only handles name resolution; page content does not pass through STRATO.

When you visit the website, the web server processes technically necessary data: IP address, date and time, page requested, amount of data transferred, browser and operating system. This serves the secure and stable operation of the website (Art. 6(1)(f) GDPR). These logs are only evaluated to find errors and fend off attacks, are not passed on to third parties and are deleted after 14 days at the latest.

Counting update checks. When the programs SystemTrayMenu or LeMa Village ask hofknecht.eu for a new version, the server counts how many different installations did so on a day, also per version and operating system. The programs name only themselves, their version number and the operating system (Windows, macOS or Linux) as program identifier (user agent). The server forms a hash from the IP address (for IPv6 only the network part) and the program identifier without the version number with a key that is created anew every day and is kept only in memory. Key and hashes are deleted when the day is over; after that the numbers cannot be traced to any device, and checks of different days cannot be linked. Only the numbers per day and program (different senders, checks) and per version and operating system (different senders) are stored. The legal basis is the legitimate interest in knowing how many installations are in use, to plan updates and operation (Art. 6(1)(f) GDPR).

Sign-in (internal account)

The internal area under /konto/ is for contributors only. After you sign in, your browser stores a session cookie so you stay signed in; this is required for the service (Section 25(2) No. 2 TDDDG). User name and password are only passed on to our own Git server (git.hofknecht.eu) for verification and are not stored. Failed sign-in attempts are counted for 15 minutes with a hash of the IP address to fend off attacks.

Share

Share is a file store for invited people. After you sign in, your browser stores a session cookie so you stay signed in; this is required for the service (Section 25(2) No. 2 TDDDG). Uploaded files stay on the server named above until they are deleted.

Purchases in the shop

When you order in the shop (hofknecht.eu/shop), I process the data needed for the contract, delivery and accounting: name, email address, country, product, price, order number, time of the order, your consents on the order page and the payment status. From these I create the license file (with name, email address and order number) and the invoice; I send you both by email from my own mailbox. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) and, for keeping records, the legal obligation (Art. 6(1)(c) GDPR). I keep invoices and accounting records as long as commercial and tax law requires (up to ten years, Section 147 AO, Section 257 HGB), the other order data as long as the license can be resent or claims from the purchase may exist. The page “Lost your license?” counts requests briefly with a hash of the IP address to prevent abuse.

Payment is handled by Stripe: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. With “Buy now” you switch to Stripe’s payment page and enter your payment details there; they never reach my server. Stripe tells me name, email address, country, amount and payment status. Stripe also processes data in the USA and is certified for this under the EU-US Data Privacy Framework; in addition, standard contractual clauses of the EU Commission apply. Stripe is itself responsible for fraud prevention and its own legal obligations, details: stripe.com/privacy. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).

The program SystemTrayMenu

SystemTrayMenu runs on your computer and needs no account. Your folders, files and settings stay there, and the program collects no usage statistics. It connects to the internet only in the following cases, always encrypted (HTTPS).

Trial period. After its first start, the trial version of SystemTrayMenu asks hofknecht.eu once when its 14-day trial period began, so that it does not start over after a reinstall. It only sends the product and a device key: a hash (SHA-256) of the identifier the operating system gives the computer, from which this identifier cannot be calculated back. Only the device key and the time of the first request are stored, without the IP address. The request itself appears in the server log like every visit (above); to prevent abuse, requests are counted for one day with a hash of the IP address. The legal basis is the legitimate interest in enforcing the trial period (Art. 6(1)(f) GDPR). The entry is deleted one year after the end of the trial period. Once the program has received an answer or a license is entered, it never asks again.

Updates. With “Update automatically” switched on (the default), the program looks for a new version on hofknecht.eu shortly after starting and then every hour, and downloads it from there. Only the data from “Server and logs” is involved, including the counting of update checks; the program names its version number and the operating system, no device or license key is sent. The legal basis is the legitimate interest in keeping the program secure and up to date (Art. 6(1)(f) GDPR). You can switch it off in the settings. The version from the Microsoft Store is updated by the Store and does not contact hofknecht.eu.

Error reports. Only if you switch on “Send error reports” in the settings (off by default) does the program send a technical report at the next start after a crash: program version, operating system, error message and the place in the program where the error occurred. User folders in paths are replaced by “~” beforehand; folder contents and settings are not included. The recipient is the service Sentry of Functional Software, Inc., San Francisco, USA, which stores the reports on my behalf (Art. 28 GDPR); standard contractual clauses of the EU Commission apply to the transfer to the USA. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by switching the option off. I use the reports only to fix errors and delete them once they are no longer needed for that.

Feedback. With “Send feedback …” in the menu of the program icon you send me a message: your text, if you like your email address for questions, program version and operating system and, if “Attach log” is ticked, the last lines of the program log. The log may contain file and folder names; user folders are replaced by “~”. The message goes to hofknecht.eu and, if the version can send error reports, also to Sentry (see above). The legal basis is your consent by sending (Art. 6(1)(a) GDPR); I delete the message once it is settled.

Website icons. For links in the menu, for example dragged in from the browser, the program fetches the icon of the linked website once, first from that website itself. If it finds none there, it asks the icon services of DuckDuckGo (Duck Duck Go, Inc., USA) and Google (Google Ireland Ltd., Ireland); they only learn the domain name of the website and your IP address, not the full address of the link. The icon is stored on your computer and, by default, in the menu folder as well, so it travels with the folder to your other computers. The legal basis is the legitimate interest in showing links with their icon (Art. 6(1)(f) GDPR).

License. The license is checked only on your computer, without internet. If there is a SystemTrayMenu license file in the Downloads folder, the program takes it over; it does not open other files there.

Stores. If you get SystemTrayMenu from the Microsoft Store or through Setapp, the privacy notices of Microsoft or Setapp also apply to purchase, download and updates. The Setapp version contains Setapp’s program library, which provides Setapp with usage data for billing. Through winget or Homebrew the program comes directly from hofknecht.eu.

SystemTrayMenu version 1 (GitHub, Microsoft Store)

Version 1 collects no data and sends nothing to the developer. Only when “Check for updates” is on, or when you click it in the menu, it asks GitHub for the list of versions; GitHub sees your IP address. When you drag a link from the browser into the menu, it fetches the website icon through a Google service; Google receives the full address of the link and your IP address. After a crash you can send an error report by mail yourself; this never happens automatically.

Contact by email or phone

If you write to me or call me, I process your details only to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them once it is settled and no statutory retention obligation applies.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). You can also lodge a complaint with a data protection supervisory authority, in Bavaria the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

Last updated: November 2026