Privacy policy

NSA.li takes the protection of personal data very seriously and adheres strictly to the rules of data protection laws. Personal data is only collected on this server to the extent that it is technically necessary. Under no circumstances will the personal data collected be sold or passed on to third parties for any other reason.

The following declaration gives you an overview of how this protection is guaranteed and what kind of data is collected for what purpose.

XMPP account data

If you use the XMPP server on NSA.li, the following data will be collected and stored:

  • Username and the corresponding domain
  • Hash of the password (but not the password)
  • Contact list
  • the date and time of your last login and the time you created your account
  • last presence information such as status and status message
  • incoming messages (so-called "offline messages"), if you are not currently connected to your account, so that they can be sent to you with your next registrations
  • If your client supports and uses XEP-0313 - Message Archive Management, your messages will be stored for 365 days. This allows you to see the same message status on different devices.
  • When using group chats, messages can also be archived for 365 days via XEP-0313 - Message Archive Management. This option is enabled by default, but can be disabled for your own group chat. In addition, the last 20 sent messages from the group chat are always saved, so new users can get a short history.
  • If your client supports and uses XEP-363 - HTTP File Upload, sent files will be stored on the server for 7 days. Some of these files are stored encrypted by your client.

Your client may store additional data on the server that is not listed above. This may include profile information (vCards), bookmarks for chats, and the like. It's up to the client whether or not this information has been publicly stored.

No IP addresses are stored beyond the duration of a login to the XMPP server.

This data is stored until a user deletes it himself via his client or completely removes his account. Accounts that have not been used for 2 years or more are automatically removed. A daily backup copy is made of this data, which is stored for some time, so that data that has actually already been deleted can continue to exist.

Use of data

The data is used for the operation of the service. The data will not be passed on to third parties unless the user of the service himself makes the data publicly available (e.g. via a vCard).

Furthermore, the data is used for tracing misuse cases of the server and for searching for problems.

Search engine

Furthermore I had the last days and weeks again and again a discussion about the fact that even DuckDuckGo, my so far actual standard search engine, should not handle the data very finely, I installed, first only for myself, a searx meta search engine at https://search.bka.li. This can be used by anyone.

Further information

If you have any questions, please do not hesitate to ask. You also have the right at any time to information about the data stored about you and the purpose of storage.

Matomo Analytics

Web Analytics

We use the web analytics program Matomo (formerly Piwik) to collect statistical data on user behaviour. This program uses cookies and JavaScript to collect various information on your computer and automatically transmits it to us. Every time you visit our website, our system collects the following data and information from the computer system of the calling computer:

  • IP address, anonymized by shortening it
  • Two cookies to distinguish different visitors (pk_id and pk_sess)
  • Previously visited URL (referrer), if transmitted by browser
  • Name and version of the operating system
  • Name, version and language setting of the browser

Additionally, if JavaScript is activated:

  • URLs visited on this website
  • times of the page views
  • Type of HTML requests
  • Screen resolution and color depth
  • Browser supported techniques and formats (e.g. Cookies, Java, Flash, PDF, WindowsMedia, QuickTime, Realplayer, Director, SilverLight, Google Gears)

The storage and evaluation of the data takes place exclusively on a central server, which is operated by BKA.li.

The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. f DSGVO. The processing of the users' personal data enables us to analyse the usage behaviour of our users. By evaluating the data obtained, we are in a position to compile information on the use of the individual components of our website. This helps us to constantly improve our websites and their user-friendliness. Our legitimate interest in the processing of data in accordance with Art. 6 Para. 1 lit. f DSGVO also lies in these purposes. By anonymizing the IP address, the interest of users in the protection of their personal data is sufficiently taken into account.

The data will be deleted after the final annual sums for the access statistics have been calculated.

Of course you have the possibility to object to the data collection. You have the following independent options to object to data collection by the central server:

We are not tracking you at the moment.

To opt out from tracking, click here

Personal user profiles are not created.