Privacy Policy
Information on the processing of personal data under the EU GDPR.
Last updated: 17 October 2026. This English version is a courtesy translation. The German version is legally binding.
Controller
The controller within the meaning of the GDPR is Gerwin Weiher, sole proprietor trading as Abteilung83, Steyrergasse 88/4, 8010 Graz, Austria, e-mail: post@abteilung83.com (see also the legal notice).
Privacy at a Glance
postctl is a local-first application. Your posts, drafts, history and the credentials of your social media accounts stay on your own computer. We do not operate a cloud service for postctl and do not receive your content or your access tokens.
Data in the App
Account tokens in the local database are encrypted with AES-256-GCM using a random key stored in a private file on your device; configuration and database files are readable by you only. Backups you create are encrypted as well (key derived from your password with PBKDF2). There is no telemetry, no usage tracking and no crash reporting.
The app only opens network connections that you cause: (a) to the platforms you connect and publish to (e.g. Instagram, Facebook, Threads, X, LinkedIn, Bluesky, Mastodon) — your content and tokens go directly from your computer to that platform, which processes them under its own privacy policy; (b) to Polar.sh when you activate or check a Pro license (see below); (c) to an AI provider of your choice if you use AI features with your own API key.
Payment & Licensing (Polar.sh)
If you buy a postctl Pro subscription (or bought a license earlier), payment and license-key issuing are handled by Polar.sh (Polar Software Inc.) as "Merchant of Record". Polar processes e-mail address, billing and payment data to conclude the contract and fulfil tax obligations (Art. 6(1)(b) and (c) GDPR). Data may be transferred to the USA; details and safeguards are in Polar's privacy policy: polar.sh/legal/privacy-policy.
When you activate a license, and about once a day while a Pro license is in use, the app sends your license key to Polar's API; Polar sees the key and, as with any request, your IP address. Nothing else is sent, and the result is cached locally so the app also works offline.
This Website
We do not use cookies, analytics, tracking pixels, embedded third-party content or external CDNs. Fonts are served from this site itself. The only thing stored in your browser is one local entry that remembers you dismissed the cookie notice (see the cookie notice). Links to external sites (e.g. GitHub, Polar) are plain links; data is only exchanged with those sites once you open them.
Server logs: the web server of this site processes your IP address, the time of the request, the requested page and browser information to deliver the site and keep it secure. Legal basis is our legitimate interest in a stable and secure website (Art. 6(1)(f) GDPR). The server is operated by us at the hosting provider IPAX (ipax.at) in Vienna, Austria; data is processed in Austria. Logs are kept only as long as necessary for operation and security.
Contact
If you e-mail us, we process your address and message to answer your request (Art. 6(1)(b) or (f) GDPR) and delete it once it is no longer needed, subject to statutory retention periods.
Your Rights (GDPR)
You have the right to access, rectification, erasure, restriction of processing, data portability and to object. Please contact post@abteilung83.com. You also have the right to lodge a complaint with a supervisory authority; in Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna.