Privacy Policy

Last updated: 2 October 2026

1. Data Controller

The data controller for this website is:
Portalix UG (haftungsbeschränkt)
Thalkirchner Str. 103
81371 Munich, Germany
Managing Director: Stefan Böck
Email: info@portalix.com

2. Hosting and Server Logs

Our servers are operated by:
noez GmbH
Location: Frankfurt am Main, Germany

Our web server does not keep an access log for this website. Only if an error occurs when a page is requested does the web server write an entry to its error log; this entry contains your IP address. The error log is rotated daily and deleted after 14 days. The legal basis is our legitimate interest in the secure and reliable operation of our service (Art. 6(1)(f) GDPR).

This website does not load any fonts, scripts or other content from third-party servers; all files are delivered by our own server.

3. Cookies

This website does not use tracking cookies. We only use technically necessary cookies:

  • Session cookie: To keep your session between page views, for example for authentication after login
  • CSRF token: For protection against Cross-Site Request Forgery
  • "Remember Me" cookie: Only if you tick "Remember Me" when logging in; keeps you logged in for up to 400 days or until you log out

Consent is not required for technically necessary cookies. The legal basis is our legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR).

4. Request Access

If you request access via the form on our homepage, we process the email address you enter. It is not stored in our database; our server sends it to us by email. The email is sent via Mailgun (Mailgun Technologies, Inc., 112 E Pecan St #1135, San Antonio, TX 78205, USA) and delivered to our mailbox at Google (Gmail). We use the email address only to reply to your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request). The request email remains in our mailbox until we delete it; no fixed retention period is defined.

5. User Accounts and Pipelines

Public registration is not available; user accounts are set up by us. For a user account we store the user name, email address and password. When you log in, a session cookie is set (see section 3). Account data and pipelines are stored until the account is deleted.

Logged-in users can set up pipelines ("crosses") that pass data between external services. The settings, content and access credentials for the connected services that you enter are stored on our server, and the data is transmitted to the services you connect. Which services receive data is determined by your own configuration. Cross I/O currently provides modules for Bitly, Mailgun, Mastodon, OpenAI and OpenAI-compatible providers, Pushover, Superfeedr, Telegram, Twitter/X, WordPress and generic webhooks. Each of these providers processes the data under its own privacy policy.

The legal basis is Art. 6(1)(b) GDPR (performance of the contract).

6. Audience Measurement (Umami)

We measure the use of this website with Umami, an open-source software that we operate on our own server. No cookies are set and no data is stored on your device. Your IP address is processed only briefly when you access a page, in order to determine country, region and city and to assign page views to a session. The IP address is not stored. We record the page visited and its title, the referring page, browser, operating system, device type, screen size, browser language and approximate location. This does not allow us to identify you personally. The data is not shared with third parties. The legal basis is our legitimate interest in improving our services (Art. 6(1)(f) GDPR).

7. Your Rights

You have the right at any time to:

  • Access (Art. 15 GDPR): What data do we have stored about you?
  • Rectification (Art. 16 GDPR): Correction of incorrect data
  • Erasure (Art. 17 GDPR): Deletion of your data ("right to be forgotten")
  • Restriction (Art. 18 GDPR): Restriction of processing
  • Data portability (Art. 20 GDPR): Export of your data
  • Objection (Art. 21 GDPR): Objection to processing

Contact for data protection inquiries:
Email: info@portalix.com

8. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority about our processing of personal data.

Competent authority:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Phone: +49 (0)981 180093-0
Email: poststelle@lda.bayern.de

9. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy to comply with changed legal requirements or changes to our service. The current version can always be found on this page.