🎬 And Action

Privacy Policy

Privacy Policy for the And Action Website and App

Last updated: March 16, 2026

1. General Information

We take the protection of your personal data very seriously. This Privacy Policy informs you how we collect, process, and use your personal data when you use the website andaction.dev (the "Website") and the "And Action" application (the "App").

Responsible Party (Controller)

Software-Entwicklung und -Vertrieb
Dr.-Norbert-Stassart-Straße 24
52134 Herzogenrath
Germany

Email: andaction@pascalchorus.de

2. Data Collection on our Website

Server Log Files

When you visit our Website, the browser used on your device automatically sends information to our server. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which access is made (referrer URL),
  • Browser used and, if applicable, the operating system of your computer and the name of your access provider.

The data mentioned are processed by us for the following purposes:

  • Ensuring a smooth connection setup of the website,
  • Ensuring comfortable use of our website,
  • Evaluation of system security and stability as well as
  • For other administrative purposes.

The legal basis for data processing is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above.

3. Data Collection in the "And Action" App

The "And Action" App is designed to help you manage your GitHub Actions and workflows.

Account and Authentication

To use the App, you must log in via GitHub. We use GitHub OAuth for authentication. We receive your GitHub username, email address, and an access token to interact with the GitHub API on your behalf.

  • Legal Basis: Art. 6 (1) lit. b GDPR (Performance of a contract).

Data from GitHub

The App accesses data from your GitHub repositories (e.g., workflow runs, logs, status) to provide its core functionality. This data is retrieved via the GitHub API and processed locally in your browser or temporarily on our servers to display it to you. We do not store your repository code.

  • Legal Basis: Art. 6 (1) lit. b GDPR.

Local Storage

The App may use your browser's local storage or indexedDB to store configuration settings and cache data for performance reasons. This data remains on your device.

4. Third-Party Services

Hosting

Our Website and App may be hosted by third-party providers (e.g., Vercel, Netlify, or Cloudflare). These providers process personal data (log files) on our behalf.

  • Legal Basis: Art. 6 (1) lit. f GDPR.

Analytics (Optional - Remove if not used)

We may use privacy-friendly analytics tools to improve our service. These tools are configured to not collect personal data or to anonymize IP addresses immediately.

5. Your Rights

You have the following rights regarding your personal data:

  • Right to information (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

If you have given your consent, you can withdraw it at any time with effect for the future.

To exercise these rights, please contact us at Insert Email Address.

6. Data Security

We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

7. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.