Privacy policy

This statement informs you pursuant to Art. 13 DSGVO — the General Data Protection Regulation (Datenschutz-Grundverordnung, DSGVO) — about the processing of personal data (Verarbeitung personenbezogener Daten) when visiting pegnitz.city. We process as little data as possible (data minimisation (Datenminimierung), Art. 5 Abs. 1 lit. c DSGVO).

Controller (Verantwortlicher)

pegnitz.city is an offering of XBANQ® GmbH. Operation, privacy, security, financing and review follow the operator's legal form and declarations. Released, public results are meant to benefit the pegnitz.city community and Pegnitz; private content, rights and consents remain protected.

Hosting and server log data

The site is operated at a hosting provider inside the EU (Hetzner Online GmbH, Germany). When it is accessed, technically necessary server log data is processed (among others the IP address in shortened form, date/time, requested resource, browser type). The legal basis is our legitimate interest (berechtigtes Interesse) in secure, stable operation (Art. 6 Abs. 1 lit. f DSGVO). A data processing agreement (Auftragsverarbeitungsvertrag) is in place with the provider.

Cookies, local storage and tracking

pegnitz.city uses no advertising cookies, no profiling and no third-party tracking tools. There is no disclosure for advertising purposes.

For operation we use technically necessary cookies and browser storage: session cookies from Supabase for signing in, the consent decision under pegnitz:consent, a short-lived local cache for a dream that has not been confirmed yet (pc.pending-dream.v1, at most 24 hours, only on your device), onboarding/audio state, and the PWA cache for static app files. Theme and sound settings are only stored if you allow the category “Settings & experience”; without that consent they apply only to the current session.

The live visitor counter uses Supabase Realtime Presence only for the current browser session. What is transmitted is a random, ephemeral session identifier and the time of being online; pegnitz.city stores no permanent visitor ID, no profile and no advertising statistics from it. Technical server log data of the hosting remains unaffected by this.

External media (Wikimedia Commons)

In the 3D knowledge Intelligence, rights-cleared images are loaded directly from Wikimedia Commons (Wikimedia Foundation, USA). In doing so your IP address is technically transmitted to Wikimedia. We set referrerPolicy “no-referrer”, so no originating URL is sent along. The legal basis is our legitimate interest in a source-faithful presentation (Art. 6 Abs. 1 lit. f DSGVO).

Contents of the knowledge Intelligence

The nodes shown describe public institutions, places, organisations, public offices/mandates and verifiable facts. Personal data of private individuals is not included; such entries are removed as part of a review.

Public-office data from public sources (public-names-v1)

Data categories: We process only the officially published name, current official role and the necessary term reference. This rule does not publish party or parliamentary-group affiliation, private contact details, private life, family details or any other private facts.

Purpose and legitimate interest: The information makes a current municipal responsibility understandable to visitors. The legal basis is Art. 6 Abs. 1 lit. f DSGVO following the documented public-official-role-v1 balancing test; we provide this information under Art. 14 DSGVO.

Sources: We use only current official pages of a public body that are bound directly to the node. Third-party portals, news pages, social networks and conflicting sources are not sufficient for releasing a name.

Updating and retention: The official source is retrieved again and checked for content during every public export. The name and office link are shown only while the role is current, necessary and supported without contradiction. If the source cannot be reached, changes, conflicts with another source or is subject to an open objection, the name is redacted. The source URL, check time, response status and SHA-256 digest are processed during the export check; raw page material is not stored.

Recipient category: The narrowly limited office details are visible to visitors of the public pegnitz.city INTELLIGENCE. They are not disclosed for advertising, profiling or private contact.

Objection: Public office holders may object to the processing on grounds relating to their particular situation under Art. 21 DSGVO and send their objection to the following contact address: The name display is suspended as a precaution until human review; inaccurate information is corrected or removed. hello@pegnitz.city.

Account and sign-in

The dream and mentor features are protected by a sign-in. Authentication runs via the service Supabase (Supabase Inc.). In doing so we process your email address, a pseudonymous user ID and a technically necessary session cookie. The purpose is providing the signed-in feature and protecting against misuse; the legal basis is carrying out the sign-in you requested (Art. 6 Abs. 1 lit. b DSGVO). A data processing agreement is in place with the provider; where processing takes place outside the EU, it does so on the basis of the EU Standard Contractual Clauses (EU-Standardvertragsklauseln). Registration is only possible from Germany. For this, when you submit, we derive the registration country of your internet provider from your IP address once — exclusively in the working memory of our server in the EU, from the public allocation data of the internet registries (RIPE NCC, ARIN, APNIC, LACNIC, AFRINIC), locally and without any query to third parties. The legal basis is our legitimate interest in a misuse-protected, territorially limited registration (Art. 6 Abs. 1 lit. f DSGVO). Your IP address is neither stored nor transmitted to third parties for this check; at most the derived country code is stored, no location history. You may object to this processing at any time (Art. 21 DSGVO).

Dream pipeline and mentor pre-planning

When you submit a dream, we process your original dream text, the mentor drafts, up to two refinements, your submission decision, your account reference and the times of processing. Before you lock it in, private pre-planning data arises in dream_preplans and dream_preplan_turns. After locking, the dream is stored as a private or review-gated vision. Public visibility arises only if you allow the matching visibility and an editorial review has been passed. The purpose is to shape voluntary dreams into feasible, safe town projects; the legal basis is Art. 6 Abs. 1 lit. b DSGVO for the platform feature you requested and, where you publish voluntarily or allow your name to be used, Art. 6 Abs. 1 lit. a DSGVO. Please do not enter special categories of personal data (besondere Kategorien personenbezogener Daten) and no data of third parties.

Research, connections and Dream Store

Locked dream pre-plans may be connected in a private research ledger with related dreams, sources, claims, funding assumptions, risks and review status. These tables (dream_research_reports, dream_research_sources, dream_research_claims, dream_connections) store no private raw dreams for public output. Project drafts, mentor tasks, notifications and later Dream Store apps may emerge from released results. App runtime data is not anonymously readable in public; use, download or installation requires an account and passed launch checks.

Mentor steps, reminders and notifications

Mentor tasks, status changes and voluntary feedback are stored in relation to your account so that your mentor can follow the next light steps. Reminders are off by default and are only stored with quiet hours after you activate them. Delivery attempts are stored as private reminder audit data so that no duplicate reminders are sent. In-app notifications are shown in your account. Email dispatch is outbox-first and stays disabled until the sender domain and dispatch configuration have been reviewed. Even afterwards, reminder emails go exclusively to citizens with a confirmed email address and their own versioned consent in the double opt-in procedure (Art. 6 Abs. 1 lit. a, Art. 7 DSGVO), which you can withdraw separately at any time; without confirmed consent nothing is sent. A reminder sitting in the queue is never reported as sent. Unsubscribes, bounces and complaints are stored as private suppression/audit data so that no further project emails are prepared for blocked recipients. The outbox stores no raw private dream version, no recipient address and no rendered private email.

Newsletter (double opt-in)

If you sign up for our newsletter, we process your email address exclusively in order to send you news from pegnitz.city. The legal basis is your consent (Art. 6 Abs. 1 lit. a DSGVO). We use the double opt-in procedure: after your sign-up you receive a one-time confirmation email; only after you click the confirmation link is the sign-up active. Before that we send you no newsletter.

As evidence of your consent (Art. 7 Abs. 1 DSGVO) we store the time of sign-up, the consent text shown including its version, a pseudonymised record of your IP address (a non-reversible HMAC hash, not the raw IP) and the time of your confirmation. Dispatch runs via an email service provider (Resend or our SMTP service) on the basis of a data processing agreement (Art. 28 DSGVO). Records and contact data are stored only as long as required for the newsletter and the statutory accountability obligation; after an unsubscribe the personal data is anonymised within the applicable period.

You may withdraw your consent at any time with effect for the future (Art. 7 Abs. 3 DSGVO) — via the unsubscribe link at the end of every newsletter email (one click, no sign-in) or by message to hello@pegnitz.city. The unsubscribe takes effect immediately; unsubscribed addresses are blocked so that no further newsletters are prepared.

Press contacts

If you work for an editorial team, a press office or a medium and we store a contact address published by your own organisation (legal notice, press or contact page), we process the name of the medium, the published role, the address and the source URL. Purpose: sending press information about pegnitz.city. Legal basis: Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in informing the press). The address comes from the source published by your organisation, not from a private enquiry. You may object to the storage and the dispatch at any time (Art. 21 DSGVO) and request deletion (Art. 17 DSGVO) — via the unsubscribe link in the press information or to hello@pegnitz.city. We do not use these addresses for newsletters and not for advertising.

Use of AI and external AI services

pegnitz.city uses AI-supported planning, research and structuring. User texts, web excerpts and related dreams are treated as untrusted data, not as a system instruction. Where external AI services are used, this happens only for the requested feature, with data minimisation, deletion of the transcript after the processing step and without publication without review. A possible transfer to a third country (Drittlandübermittlung) is only used on a suitable basis such as the EU standard contractual clauses and is documented in the specific provider configuration. No automated decisions with legal effect are made about you.

Ziggy OS projection

pegnitz.city is registered as a project node in Ziggy OS. Ziggy is a projection, not the primary database. Child nodes for final dream operations are written only after review, operator release and configured credentials. The projection contains only aggregated project information, sources, tasks, risks, funding logic and privacy-safe connected dreamers. Names are transferred only with explicit, adult name release; otherwise they are anonymised.

Media Vault (images, videos, audio recordings)

When you upload media into the town media library, we process the file itself, technical details (format, size, dimensions, duration), a verification hash, your title/category/keyword entries, your classification of the people shown (no people · recognisable adults with consent · minors with the consent of those with parental responsibility), your rights assurance and the version of the terms of use you accepted. The files are held in private storage and are not publicly retrievable. Nothing becomes visible or is used before a human has released it.

Before any of your media becomes visible or can be used, a human reviews it — without that human release nothing happens. Where the EU-local AI analysis is available, it supports this review: on our own hardware in Germany, without transfer to a third country. An image AI then describes and tags your medium and estimates whether people or presumed minors are visible; audio tracks are transcribed locally; local vectors are computed for search. If this AI analysis is not available, exclusively a human reviews before any release. The AI makes no decision about you — if your statement differs from an AI signal, a human must review in any case before anything is released. AI-edited output is labelled by us as “AI-edited” (Art. 50 EU AI Act).

The legal basis for using media with recognisable people is their consent, or that of those with parental responsibility (Art. 6 Abs. 1 lit. a, Art. 8 DSGVO, § 22 KunstUrhG); for the upload and your account it is carrying out the feature you requested (Art. 6 Abs. 1 lit. b DSGVO). Copyright stays with you; you grant pegnitz.city a simple (non-exclusive) right of use (§§ 31, 34, 35 UrhG). If other people are visible in a medium, we hereby also inform them about the processing (Art. 14 DSGVO); the uploading person affirms that they have obtained their consent.

You may withdraw your release at any time and request deletion (Art. 7 Abs. 3, Art. 17 DSGVO). We then remove the medium together with its AI analysis, transcript and search vector from the active media library; a minimal record (who, when, which medium — without the content) is kept for accountability. Materials already printed or passed on to project partners cannot always be recalled, by their nature. Rejected media are automatically and permanently deleted after a short period. There is no third-country transfer of the media data.

Your rights

You have the right of access (Recht auf Auskunft) (Art. 15), rectification (Berichtigung) (Art. 16), erasure (Löschung) (Art. 17), restriction of processing (Einschränkung der Verarbeitung) (Art. 18), data portability (Datenübertragbarkeit) (Art. 20) and objection (Widerspruch) (Art. 21) as well as a right to lodge a complaint (Beschwerderecht) with a supervisory authority (Aufsichtsbehörde) (Art. 77 DSGVO), for example the Bavarian State Office for Data Protection Supervision (BayLDA). Please use the contact address given above. Signed-in users can additionally retrieve a JSON export at /api/me/export and remove their account via the account deletion function. Non-live owner-related project drafts are deleted in the process; civic work already published live is continued only after a legal balancing and with the owner link released.

For support, security, moderation and handling your rights, specially authorised administrators may view necessary account data and send you a purpose-bound message. This direct service channel is not used for marketing. A sign-in block only prevents logging in and is not automatically a restriction of processing under Art. 18 DSGVO. In an administratively executed deletion, the affected data areas are determined first, active account links and private files are removed, and the sign-in account is deleted last. Legally required records are not reported as “deleted” but are handled separately, with restricted access and data minimisation.

After the technically confirmed completion, a minimal deletion record without email, name, account identifier or deleted content is kept for accountability and possible defence against claims until the end of the regular three-year limitation period, counted from the end of the year of completion (German Civil Code — BGB §§ 195, 199). After that this record is removed automatically as well. A separate suppression record contains only INTELLIGENCE node identifiers, which may contain neither an account identifier nor a personal dream reference, and prevents deleted content from reappearing publicly out of a backup.

How to exercise your rights

• Access (Art. 15 GDPR): yourself, in your settings.
• Rectification (Art. 16 GDPR): yourself, in your settings or by message to the privacy contact.
• Erasure (Art. 17 GDPR): yourself, in your settings.
• Restriction of processing (Art. 18 GDPR): yourself, in your dream directory or by message to the privacy contact.
• Data portability (Art. 20 GDPR): yourself, in your settings.
• Objection (Art. 21 GDPR): by message to the privacy contact.

Transparency on AI (EU AI Act)

The contents are researched, structured and curated with AI support and are then checked against sources. This use of AI is disclosed transparently; no decisions with legal effect on individuals are made.