Privacy Policy

This is a convenience translation of our German Datenschutzerklärung. In case of discrepancies, the German version prevails.

Protecting your data matters to us. In accordance with the EU General Data Protection Regulation (GDPR), this policy explains which personal data we process when you use the Webhooky app and this website.

Controller

Aigner Software e.U., owner Matthias Manuel Aigner
Hauptplatz 23, 4190 Bad Leonfelden, Austria
Email: support@webhooky.app

1. Data we process in the app

Account

Using the app requires a user account created via Firebase Authentication (Google Ireland Limited). We process your email address (when registering with email/password) and a technical user ID. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Webhook endpoints and events

When you create endpoints, we store their configuration (name, notification text, sound, color) and, for every received webhook, metadata (time, endpoint, delivered title/text, delivery status) in Google Cloud Firestore. The content (payload) of a webhook is only stored if you enable the "Save payload" option for the respective endpoint. You decide which data external services send to your endpoint through your configuration at those services. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Push notifications

To deliver push notifications we process device tokens from Firebase Cloud Messaging (FCM) and the Apple Push Notification service (APNs) as well as your device's platform. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Crash and error reports

We use Firebase Crashlytics to detect and fix crashes and errors in the app. This involves technical information (device type, operating system version, crash traces, pseudonymous installation IDs). Legal basis: legitimate interest in a stable app (Art. 6(1)(f) GDPR).

Purchases

Premium subscriptions are handled through Google Play or the Apple App Store. We do not receive payment data (such as credit card numbers), only the information whether a valid subscription exists. The privacy policies of Google and Apple apply. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

2. Data we process on this website

This website is served via Firebase Hosting (Google). When you visit it, technically necessary access data (IP address, time, requested resource, user agent) is processed in server logs. Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR). The website uses no cookies and no analytics or tracking services.

3. Recipients and processors

We use Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as a processor with the services Firebase Authentication, Cloud Firestore, Cloud Functions, Firebase Hosting, Firebase Cloud Messaging and Firebase Crashlytics. Data may be transferred to the United States; Google is certified under the EU-U.S. Data Privacy Framework, and standard contractual clauses are in place in addition. More information: firebase.google.com/support/privacy.

4. Retention

We store account data, endpoints and the event history for as long as your account exists. You can delete your account together with all data at any time directly in the app (Settings → Delete account); deletion takes effect immediately and is irreversible. Crash reports are deleted automatically by Firebase Crashlytics after 90 days.

5. Your rights

You have the rights of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). To exercise them, contact support@webhooky.app. If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

6. Note for webhook senders

Webhook endpoints are configured by our users themselves at third-party services. The respective user is responsible for the content those services send to an endpoint. Do not send personal data to a Webhooky endpoint unless it is necessary.

Last updated: July 2026 · See also: Imprint · Terms of Service