Privacy Policy
Last updated: August 14, 2025
This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter "data") within our service "unicomment" (the Chrome Extension and the associated website) and the rights to which you are entitled.
1. Data Controller (Verantwortlicher)
The party responsible for processing data is:
Assan Haydar
Am Burghof 71
41516 Grevenbroich
Germany
Email: support@unicomment.io
2. Overview of Processing Activities
Below is a summary of the types of data processed, the purposes of their processing, and the legal bases.
- Website Visitors: IP addresses, device and browser information (for security and delivery). Legal basis: Art. 6(1)(f) GDPR.
- unicomment Users (with Account):
- Account Data (Name, Email, Google User ID, Profile Picture).
- User-Generated Content (Comments, Replies, Likes).
- Usage Data (URLs of pages commented on).
3. Data Processing on this Website
a) Hosting and Server Log Files
To operate this website securely, we utilize hosting services. Our server automatically collects and stores information in so-called server log files, which your browser transmits. These are:
- IP address
- Browser type and version
- Operating system used
- Referrer URL (the previously visited page)
- Time of the server request
This data is not merged with other data sources. The legal basis for this processing is our legitimate interest in the secure, stable, and efficient provision of our website pursuant to Art. 6(1)(f) GDPR. Our hosting provider is the Hetzner Online GmbH, and our server is located in Falkenstein, Germany. All data remains within the European Union.
b) Cookies
Our website uses cookies. Cookies are small text files that are stored on your device. We use technically necessary cookies to enable the core functionalities of our service, such as keeping you logged in (session cookie based on your auth token).
The processing of data through technically necessary cookies is based on Art. 6(1)(b) GDPR, as they are required for the use of our service, or on Art. 6(1)(f) GDPR, our legitimate interest in providing a functional website. We do not use cookies for marketing or tracking purposes.
4. Data Processing for the unicomment Service
To use the core functions of unicomment, you need to create an account. The processing of data is for the purpose of providing, executing, and improving our contractual services.
a) Registration via Google OAuth
You can register for our service using Google OAuth. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you click "Login with Google", you are redirected to Google. There, you log in with your Google credentials and authorize the transfer of certain data to us.
Through this process, we receive the following data from Google, which we use to create and manage your user account:
- Your Name
- Your Email Address
- Your Google Profile Picture
- A unique Google User ID
This process is based on Art. 6(1)(b) GDPR, as it is necessary for the performance of our service contract with you.
b) User Account, Content and Data Storage
Your account data, as well as the comments, replies, and likes you create, are stored in our backend database (Pocketbase). This data is hosted on our own dedicated server at Hetzner in Falkenstein, Germany. No data is transferred to third countries. You can voluntarily change your display name and profile picture in your account settings. This data is necessary to display your content publicly under your chosen name and to manage your account. The legal basis is Art. 6(1)(b) GDPR.
c) Data Processing within the Chrome Extension
The unicomment extension determines the URL of your currently active browser tab to show relevant comments or allow you to post a new one. This URL is processed temporarily and is only permanently stored in our database in connection with your user ID if you actively create a comment on that page.
5. Data Retention
We store your data only as long as it is necessary for the respective purposes. Your account data and user-generated content are stored as long as your account exists. If you delete your account, your personal data will be permanently removed.
You can delete your account at any time by using the "Delete Account" function in your account settings.
6. Your Rights as a Data Subject
As a data subject, you have the following rights under the GDPR:
- Right of Access (Art. 15 GDPR): You have the right to obtain confirmation as to whether or not personal data concerning you is being processed.
- Right to Rectification (Art. 16 GDPR): You have the right to obtain the rectification of inaccurate personal data concerning you.
- Right to Erasure ('Right to be Forgotten') (Art. 17 GDPR): You have the right to obtain the erasure of your personal data without undue delay.
- Right to Restriction of Processing (Art. 18 GDPR): You have the right to obtain restriction of processing.
- Right to Data Portability (Art. 20 GDPR): You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format.
- Right to Object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1)(f) GDPR (legitimate interests).
To exercise your rights, please contact us at the details provided in the "Data Controller" section above.
7. Right to Lodge a Complaint
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.