☠️ DEATH MONITOR

Privacy Policy & Privacy Policy Notice (RGPD / GDPR)

📄 1. Data Controller

This website ("DeathMonitor") operates in full compliance with the European General Data Protection Regulation (GDPR / RGPD - Regulation EU 2016/679).

Data Controller Contact: [email protected]

🔒 2. Data We Collect & Legal Basis

Account Credentials (Email & Encrypted Password)

Purpose: Authentication and user session management.

Legal Basis: Contract Execution (Art. 6.1.b GDPR) — necessary to provide account functionality.

Watchlist Targets & Wikidata Entity IDs

Purpose: Personalizing mortality tracking and notification contexts.

Legal Basis: Contract Execution (Art. 6.1.b GDPR).

Web Push Subscriptions (Device Endpoints & Cryptographic Keys)

Purpose: Delivering real-time push notifications to your browser.

Legal Basis: Explicit Consent (Art. 6.1.a GDPR) granted via native browser permission dialogs.

🌐 3. Third-Party Processors & Infrastructure

We rely on essential infrastructure providers to ensure system availability, security, and alerting functionality:

  • Cloudflare, Inc. — Content Delivery Network (CDN), SSL encryption, and DDoS/bot protection. Cloudflare may process transient connection metadata (IP address) strictly for security purposes under Standard Contractual Clauses (SCCs).
  • Browser Push Delivery Networks (Google FCM, Apple APNs, Mozilla Push Service) — Used strictly to route web push notifications to your specific client device.

🍪 4. Cookies & Local Storage

DeathMonitor uses only essential session cookies (specifically dm_session) strictly necessary to keep you signed in securely. We do not track you across third-party websites, nor do we run advertising or tracking cookies.

🛡️ 5. Your RGPD / GDPR Rights

  • Right to Erasure (Art. 17): You can permanently purge all account data, push subscriptions, and watchlists at any time using the Delete Account action in your Dashboard.
  • Right to Data Portability (Art. 20): You can download a structured JSON copy of your profile and watchlist data directly via your Dashboard.
  • Right to Withdraw Consent: Push notifications can be revoked anytime using the toggle on your dashboard or through browser site settings.