Privacy

The mobile app

The AirLock companion app communicates with the device over Bluetooth Low Energy only. It does not contact any server, does not include analytics, crash reporting, or advertising SDKs, and does not read your contacts, location, microphone, camera, or photo library. The single permission it requests is Bluetooth, used solely to discover and connect to your AirLock device.

Settings you adjust in the app — themes, language, last-connected device — are stored locally on your phone in the app's sandbox. They never leave the device.

The device firmware

The AirLock firmware runs entirely on the device. When you connect over Bluetooth, all communication is between your phone and the device directly. No third party is involved.

Bluetooth pairing

If you choose to bond a phone with the device using the on-device "BT Pairing" flow, the resulting pairing keys are stored in the device's own flash storage and on your phone. They never leave either endpoint.

Wi-Fi STA mode

If you choose to connect the device to your home Wi-Fi (optional, for the embedded web UI), the device keeps the SSID and password in its own flash storage and uses them only to host its local web page on your network. The device does not phone home, send telemetry, or contact any external service.

Wi-Fi AP mode

If you keep the device in its own access-point mode (the default before you've joined a network), the device hosts a Wi-Fi network named AirLock-XXXX. Devices that join this network can reach the embedded web UI at airlock.local or the gateway IP. The AirLock itself does not have internet access in this mode, and does not relay traffic to any external service. The default AP password is shown on the device's OLED via the "Show QR" entry; you can change it from the embedded web UI.

This website

reizflanke.de serves only static HTML, CSS, and images. There are no cookies, no analytics, no tracking pixels, and no third-party scripts. The single exception is the browser firmware installer, which loads the ESP Web Tools and improv-wifi-serial-sdk libraries from their public CDNs (unpkg.com, esm.sh) on that page only.

Your IP address is visible to the web host as part of normal HTTPS connections; we don't keep server logs.

Newsletter sign-up

If you subscribe to the newsletter via the form on the home page, we record your email address and log, for proof of consent, the timestamp and IP address of your sign-up and confirmation (double opt-in). The legal basis is your consent under Art. 6 (1)(a) GDPR. The data is retained as long as you remain subscribed. Newsletter delivery and list management are handled by Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France) as a data processor under Art. 28 GDPR. A data-processing agreement is in place. Details: Brevo Privacy Policy.

You can withdraw your consent at any time — either via the unsubscribe link at the bottom of every newsletter email, or by writing to info@reizflanke.de. The withdrawal takes effect going forward; processing that has already occurred remains lawful.

Contact

Questions about privacy: info@reizflanke.de