Datenschutz

Birdy is a small, invite-only research preview. We collect as little as possible and never sell or share your data. This page explains what is stored and your rights over it.

Who is responsible

The controller for data processing is the Birdy operator (see Impressum ). Contact: birdy@lay.haus.

What we store

Account: your name, email address, username, optional bio and avatar, and a hashed password.
Location: only the city you choose — never your exact GPS position. Birdy never asks your browser for precise location.
Content: your posts, comments, likes, presence signals, friendships, invites and notifications.
Photos: images you upload are re-encoded on our server; all camera metadata, including GPS EXIF, is stripped before storage.
Technical: session cookies (strictly necessary, to keep you signed in) and, for push notifications, the subscription your browser provides.

Analytics — no cookies, no banner

We use self-hosted Umami for anonymous, aggregate usage statistics. It sets no cookies and does not track you across sites, so no consent banner is required. No personal profiles are built.

Email

Sign-in links, password resets and (if you opt in) notification emails are sent from birdy@lay.haus via our own mail server. We keep a minimal log of which message types were sent, for operational purposes.

Hosting & backups

Birdy runs on servers hosted by Hetzner Online GmbH, Nürnberg, Germany (EU). The database is backed up nightly and copies are automatically deleted after 30 days.

Your rights

Export: download all your data as a ZIP from Settings at any time.
Deletion: delete your account from Settings — your data is removed immediately, and any backup copies age out within 30 days. Email addresses held in invite records are purged or anonymized on deletion.
Access & correction: edit your profile in Settings, or contact us.

You also have the right to lodge a complaint with a data protection authority.

Age

Birdy is for people aged 16 and older. You confirm your age when you create an account.