Privacy Policy

1. Controller

Luca Saur
Email: mail@lucasaur.com

(Address see Legal Notice.)

2. Overview

“Coxi Credits” (coxi-credits.vercel.app) is a free, non-commercial online tool for tracking study progress and estimating grades in the Cognitive Science program (Bachelor and Master) at the University of Osnabrück.

There is no registration and no user account. Your study data (courses, grades, selections) is stored exclusively locally in your browser and is not transmitted to us. When you visit the website, technical access data and anonymous statistics are additionally processed through our hosting provider Vercel (see section 3).

3. What data is processed?

3.1 Data that stays on your device only (localStorage)

When you use the tool, your browser stores the following information locally (localStorage) so your progress is preserved:

• Selected program (Bachelor or Master)
• Completed mandatory courses and electives
• Free electives (name, ECTS, grade)
• Mathematics ECTS (Bachelor)
• Grades and course selections
• Master: study project, thesis, mandatory elective areas

Legal basis: Art. 6 (1) (b) GDPR (technically necessary to provide the functionality you use) and/or Art. 6 (1) (f) GDPR (legitimate interest in functional local storage).

You can delete this data at any time by removing website data for this site in your browser settings (Browser settings → Cookies and site data / Local Storage).

JSON export/import and PDF export run entirely in your browser. On import, a file you choose is read locally; it is not uploaded to a server.

3.2 Hosting and server log files (Vercel)

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA.

When the website is accessed, data is processed for technical reasons, in particular:

• IP address (briefly in server log files)
• Date and time of access
• URL accessed
• Browser type and version (User-Agent)
• Referrer URL

This processing is technically necessary to deliver the website and ensure stability and security.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure operation of the website).

Processor: Vercel Inc.
Privacy: vercel.com/legal/privacy-notice
Vercel is certified under the EU-US Data Privacy Framework (vercel.com/docs/security/compliance). Transfers to the USA are based on this framework.

3.3 Vercel Web Analytics (anonymous)

We use Vercel Web Analytics (@vercel/analytics) to understand in aggregated form how the website is used (e.g. page views, country of origin, browser/OS, referrer).

• No cookies are set.
• There is no cross-site tracking.
• Visitors are not permanently identified; only anonymized, aggregated statistics are evaluated.
• IP addresses are not stored in a way that allows individual persons to be identified (see Vercel documentation).

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in anonymous reach and usage measurement to improve the service).

Further information: vercel.com/docs/analytics/privacy-policy

3.4 Vercel Speed Insights (anonymous)

We use Vercel Speed Insights (@vercel/speed-insights) to anonymously measure Core Web Vitals (load times, performance) and optimize the website.

Data collected includes, among other things, route/URL, device type, browser, country (ISO code), and performance metrics — without attribution to individual persons and without cookies.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in technical optimization of the website).

Further information: vercel.com/docs/speed-insights/privacy-policy

3.5 Fonts

The website uses the “Geist” typeface via next/font/google from Next.js. Font files are loaded onto the server at build time and delivered to your browser from there — no requests are made to Google servers when you visit the site.

3.6 External links

The website links to external sites, including:

• Google Slides (explanations of the study plan)
• GitHub (project source code)

When you click these links, the privacy policies of the respective provider apply. We are not responsible for their data processing.

4. Cookies

This website does not set tracking cookies.

Vercel Analytics and Speed Insights work without cookies. Technically necessary storage in localStorage (see section 3.1) serves solely to operate the tool on your device.

5. Retention

• localStorage: until you delete the data in your browser or perform a JSON import that overwrites your local data
• Server log files (Vercel): according to Vercel policies, typically a limited retention period
• Analytics/Speed Insights: anonymized, aggregated data at Vercel according to their retention policies

6. Your rights

Locally stored study data: This data exists solely on your device. We have no access to it and cannot view, correct, or delete it. You manage this data yourself through your browser settings (see section 3.1).

Server-side processing (hosting, anonymous statistics): With regard to personal data processed in connection with operating this website, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR), where applicable
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR), without prejudice to any other administrative or judicial remedy

To exercise your rights or for privacy questions, please contact: mail@lucasaur.com

Supervisory authority:
The State Commissioner for Data Protection of Lower Saxony (LfD Niedersachsen)
lfd.niedersachsen.de

7. No obligation to provide data

Using the tool does not require registration or providing personal data to us. localStorage is only used when you actively use the tool; without local storage, settings and progress cannot be saved permanently.

8. Changes

We reserve the right to update this privacy policy when the website or legal requirements change. The current version is always available at /datenschutz.