---
title: "Privacy Policy | AllMyLittleApps"
canonical_url: "https://allmylittleapps.io/privacy"
last_updated: "2026-09-03T11:49:13.799Z"
meta:
  author: AllMyLittleApps
  description: "How AllMyLittleApps processes personal data: GDPR-compliant, hosted in Germany (Hetzner), self-hosted Umami & Listmonk analytics, AES-256 credential encryption."
  keywords: "app store analytics, google play console dashboard, revenuecat analytics, mobile app saas, app mrr tracker, indie hacker app dashboard, ios developer tools, app store connect api, subscriber cohort retention, ai review responder"
  "og:description": "How AllMyLittleApps processes personal data: GDPR-compliant, hosted in Germany (Hetzner), self-hosted Umami & Listmonk analytics, AES-256 credential encryption."
  "og:title": "Privacy Policy · AllMyLittleApps"
---

[Back to Home](https://allmylittleapps.io/)

GDPR Compliant

# **Privacy Policy**

Last updated: September 2026 • Transparent information regarding data processing under GDPR

**Hosted in Germany**

Hetzner Online GmbH

**Self-Hosted Umami**

100% Cookieless

**Self-Hosted Listmonk**

Double Opt-In active

## **1. Data Controller**

The controller responsible for data processing on this website under the General Data Protection Regulation (GDPR) is:

**AllMyLittleApps SaaS**  
 Patrick Kolo  
 Germany  
 Email: [~~support@allmylittleapps.io~~](mailto:support@allmylittleapps.io)

## **2. Hosting & Infrastructure at Hetzner (Germany)**

Our web servers, databases, and application infrastructure are hosted on dedicated infrastructure by **Hetzner Online GmbH** in Germany (Nuremberg & Falkenstein data centers). The data centers operate under strict European privacy laws and are certified according to **ISO 27001**.

Server logs are captured automatically for security and diagnostic purposes (Art. 6 Para. 1 lit. f GDPR) and deleted after a maximum of 7 days. A Data Processing Agreement (DPA) under Art. 28 GDPR has been concluded.

## **3. Web Analytics with Self-Hosted Umami (Germany)**

We use the privacy-friendly open-source tool **Umami Analytics**, self-hosted on our German servers.

- **No Cookies:** Umami operates 100% cookieless without storing persistent identifiers on your device.
- **No Third-Party Sharing:** Analytics data is never sold or transferred to third parties.
- **IP Anonymization:** IP addresses are never stored in plain text and are anonymized via rotating daily hashes.

## **4. Newsletter & Waitlist via Self-Hosted Listmonk (Germany)**

Waitlist and newsletter subscriptions are managed using **Listmonk**, self-hosted on our servers in Germany.

**Double Opt-In:** Registration uses a verified double opt-in process. You will receive a confirmation email containing a verification link to confirm your subscription. You can withdraw your consent at any time via the 1-click unsubscribe link in every email.

## **5. Payment Processing via Stripe**

For subscription billing, we use **Stripe Payments Europe, Ltd.** Payment details are processed directly through Stripe's certified **PCI-DSS Level 1** infrastructure without ever touching our servers in plain text (Art. 6 Para. 1 lit. b GDPR).

## **6. Bank-Grade Credential Encryption (AES-256-GCM)**

Sensitive store credentials (Apple .p8 keys, Google Play JSONs, RevenueCat tokens) are encrypted in memory with **AES-256-GCM** before being written to our database.

## **7. Your Rights under GDPR**

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

To exercise your rights, please email us at: [~~support@allmylittleapps.io~~](mailto:support@allmylittleapps.io).