Programming Helper

GDPR overview

Implementation is thorough and concrete. The controller is named in full — Santino Seither und Fabian Stehle, Appsplosion, GbR, Sperlingsweg 5, 61462 Königstein — with a telephone number and an e-mail address. The policy enumerates the complete set of data-subject rights: access to source, recipients and purposes free of charge, rectification, erasure, withdrawal of consent, restriction of processing, portability, objection under Article 21(1) and 21(2), and complaint to a supervisory authority. Legal bases are cited article by article, 6(1)(a), 6(1)(b) and 6(1)(f). Transfers to the United States rest on standard contractual clauses, with an explicit warning that US protection is not equivalent to the EU's. Joint controllership under Article 26 is declared with Facebook Ireland. No data protection officer is named, and no Article 27 representative is designated — none is required, the controller being established in Germany.

Who owns the data?

The terms of service claim copyright over the website's own content — text, images, logos and design — and forbid reproducing, distributing or exploiting any part of it without prior written permission. They say nothing at all about who owns the code the generators return, which is left unaddressed. What the site does state plainly, beneath every result, is that all generations are public and can be seen by other users; each output also receives a shareable snippet URL. The publisher, Appsplosion GbR, therefore asserts no claim over your snippet but publishes it by default. An optional Firebase account stores work, though anonymous use remains possible.

Reuse rights

Nothing in the terms sets a licence on the code the generators return, so no permission mechanism is described for reusing your own output and no restriction is placed on it. The reverse direction is restricted: the site's own content may not be reproduced, distributed or exploited without prior written permission, and use of the service is limited to personal, non-commercial purposes. Because every generation is published and given a shareable URL, other users can read and reuse what you produce on the same undocumented footing. Personal data is governed separately — it feeds advertising and analytics through Google AdSense, Google Ads, DoubleClick and Google Analytics on legitimate-interest or consent grounds, and the policy states it is not passed to third parties beyond contract performance without express consent.

Data retention & training

Hosting summary

The site is hosted on AWS, with Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg named as the provider; the policy warns that personal data may be transferred onward to AWS's US parent company under the EU standard contractual clauses. Two content delivery networks sit in front of it: Cloudflare Inc. in San Francisco, and Google Cloud CDN operated by Google Ireland Limited in Dublin. Data processing agreements are declared with each provider. Analytics and advertising data follow a separate path — the policy states that information recorded by Google Analytics and AdSense is transferred to Google servers in the United States and stored there. No hosting country is named for the application data itself; only the providers' registered offices are given, which is not the same thing. DNS resolves to 76.76.21.21, an anycast CDN node, which indicates nothing about where data rests. The publisher is established in Germany, so EU law governs the controller.