Videoflix - Privacy Policy

1. Overview

Videoflix is a non-commercial learning project, developed as part of the Developer Akademie GmbH advanced training program. This page explains which personal data Videoflix processes, why, and which rights you have. Videoflix does not use tracking, analytics or advertising and does not sell any data.

2. Controller

The person responsible for data processing is named with address and email in the Imprint.

3. Your account

To register, you enter your email address and a password. We store your email address, your password only as a secure hash (never in plain text), the activation state of your account and the time of registration. We need this data to create your account, to log you in and to show you the videos (Art. 6 (1) (b) GDPR). The data is stored until your account is deleted.

4. Emails

After the registration we send you an email with an activation link. If you forgot your password, we send you an email with a link to set a new one. These emails are sent via the email service of Google (Gmail), operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes your email address and the content of the email to deliver it. Data may also be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. The legal basis is Art. 6 (1) (b) GDPR.

5. Cookies and local storage

Videoflix only uses cookies that are technically necessary for the login (§ 25 (2) TDDDG):

access_token: proves that you are logged in, expires after 30 minutes.
refresh_token: renews the access token, expires after 1 day.

Both cookies cannot be read by scripts in the browser (HttpOnly) and are deleted when you log out. If you enter your email address on the start page, it is kept in the local storage of your browser until the registration is finished, so the registration form can be filled in for you.

6. Video player

The video player uses the library hls.js, which is loaded from the content delivery network jsDelivr. When the video page is opened, your browser connects to jsDelivr, which receives your IP address. This is necessary to play the videos (Art. 6 (1) (f) GDPR). The font DM Sans is stored on the Videoflix server itself, so no connection to Google Fonts is made.

7. Server data

When you open Videoflix, your browser automatically sends technical data such as your IP address, the time and the requested page. This data is only used to deliver the website and the videos and to keep the service secure (Art. 6 (1) (f) GDPR).

8. Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20) and to object to its processing (Art. 21). To use these rights, write an email to the address in the Imprint. You also have the right to complain to a data protection supervisory authority (Art. 77 GDPR).

Last updated: September 30, 2026