Privacy Policy

Last updated: 15 July 2026

1. Controller

The controller responsible for processing personal data through Free Teleprompter is:

Kailar UG (haftungsbeschränkt)
Viererblock 18a
39326 Wolmirstedt
Germany

Email: kontakt@kailar.de
Phone: +49 152 26743296

No data protection officer has been appointed. Privacy questions can be sent to the contact address above.

2. Teleprompter Sessions and Script Content

In one-device mode, your script is rendered in the same browser and is not sent through the WebSocket session service. If you choose phone-remote mode, the service creates a temporary session with a four-digit pairing code. Your controller and display exchange script text, settings and playback commands through encrypted WebSocket connections. Script content and session state are held in server memory only while the session is active. They are not intentionally written to the application database or application logs. The server session is deleted when the display disconnects; unused pairing codes expire after ten minutes.

The data may include personal data contained in a script you choose to enter. We process it only to provide the teleprompter and device-sync functions you request. The legal basis is Article 6(1)(b) GDPR. Please only enter third-party personal data when you are permitted to use it.

3. Storage on Your Device

The one-device editor and controller page use browser local storage for these functions:

Optional script recovery: tp-remember-script records that you enabled “Remember this script on this device”, and tp-script then holds the most recently entered script. This function is off by default. It is activated only through the switch in a prompting editor and relies on your prior consent under section 25(1) TDDDG. Turning the switch off or selecting “Remove saved copy” deletes both entries.
Active-session reconnection: tp-session holds the most recent pairing code and tp-control-token holds a random security credential used to reconnect without reusing the short code. These entries support the expressly requested secure-reconnection function and are treated as strictly necessary under section 25(2)(2) TDDDG.

Script recovery information remains only on that browser profile until it is overwritten, you disable recovery, remove the copy or clear site data. Script text is transmitted to the paired display while you use the active teleprompter session regardless of whether optional local recovery is enabled. Pairing information is removed when the app resets the session where applicable or when you clear site data.

4. Connection Data and Hosting

The service is hosted on infrastructure supplied by Hetzner Online GmbH in Germany. Delivering HTTP and WebSocket traffic necessarily processes connection data such as IP address, request time, requested route, response status, browser or user-agent information and technical error data. Hosting and proxy systems may retain limited logs for service operation, abuse prevention and incident investigation. Logs are reviewed and deleted when they are no longer required for those purposes.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are reliable delivery, troubleshooting and protection of the service and its users.

5. Privacy-Friendly Analytics

The landing page, app and controller use a self-hosted installation of Umami Analytics served from analytics.learademacher.com on Hetzner infrastructure in Germany. Umami does not set analytics cookies and does not track you across unrelated websites. It processes page URL and title, referrer, browser language, screen size, browser, operating system, device type, approximate country and visit time. A session identifier is derived from technical request information such as IP address and user agent; the raw IP address is used transiently for this purpose and is not shown in our analytics dashboard.

We also record limited product events: landing-page app launches, selection of one-device or phone-remote mode, prompt starts, completed controller pairings and QR-code prefills. Event properties identify only the interface, selected mode or entry point. Script text, pairing codes and controller tokens are never included in analytics events.

We use these statistics to understand service usage, detect problems and improve Free Teleprompter. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is operating and improving a free service. Analytics records are retained while they are needed to compare service usage over time and are deleted when that purpose no longer applies. We periodically review whether continued retention is necessary.

The tracker respects your browser's Do Not Track signal. You may also object on this device at any time:

6. Fonts and External Content

The fonts used by Free Teleprompter are served from the same freeteleprompter.app origin. The site does not contact Google Fonts. We do not embed advertising pixels, social-media trackers or third-party video players.

7. Recipients and International Transfers

Technical data may be processed by Hetzner Online GmbH as our infrastructure provider and by authorised Kailar personnel who maintain the service. Umami is operated by Kailar on EU infrastructure rather than supplied as a third-party cloud analytics service. We do not intentionally transfer Free Teleprompter session or analytics data outside the European Economic Area. We disclose data to public authorities only where legally required.

8. Security

Traffic is encrypted with HTTPS/WSS in production. Pairing codes are short for ease of use, but are time-limited, protected by attempt throttling and usable only for the first pairing. A high-entropy device token is required for later controller reconnections. We also limit message size and validate the permitted website origin. No online service can guarantee absolute security.

9. Your Rights

Subject to the GDPR's conditions, you may request access, rectification, erasure, restriction of processing and data portability. You may object at any time to processing based on Article 6(1)(f) GDPR. Optional on-device script recovery relies on your consent. You can withdraw it at any time by turning off “Remember this script on this device” or selecting “Remove saved copy”; this deletes the locally saved script and does not affect the lawfulness of earlier storage.

Because server-side teleprompter sessions are temporary and no account is created, we may be unable to identify or retrieve a session after it ends. You can also delete all locally stored information through your browser settings. To exercise your rights, contact kontakt@kailar.de. You also have the right to lodge a complaint with a supervisory authority, in particular the State Commissioner for Data Protection of Saxony-Anhalt.

10. Changes to This Policy

We update this notice when the service, its providers or the applicable rules change. The date above identifies the current version. Material changes will be presented prominently where appropriate.