Privacy policy

English translation for convenience – the German version applies. Status: 04.11.2026 · draft

1. Controller

Georg Leuschner
Im Weichserhof 2
50678 Köln
Deutschland
Email: hello@gigsaw.de

2. What Gigsaw is

Gigsaw is a band app: dates, crew planning, tasks, setlists, chat and notice board. Access is by personal invitation only.

3. Data we process

Account data: name, email address, password (only as a hash, never in plain text), language, time of last sign-in, acceptance of the terms.
Your band’s content: everything you enter – dates, RSVPs, rides and mileage, tasks, messages, posts, setlists, crew plans, absences. This can include data about people (name, phone number, home address, skills). If you enter data about others, make sure they agree.
Technical data: a session cookie keeps you signed in. IP addresses are not stored in plain text, only as an unreadable check value to slow down password guessing (deleted after 2 days). The host usually writes access logs for a short time.

4. Purpose and legal basis

To provide Gigsaw (Art. 6(1)(b) GDPR) and for security (Art. 6(1)(f) GDPR). No tracking, no advertising.

5. Where data is stored and how it is protected

Hosting: IONOS SE (Germany), under a data processing agreement.
Each band’s content is stored encrypted (AES-256). The main key is kept apart from the database server. The connection uses HTTPS.
Important: every member of a band receives the band’s content on their device; roles (band, planner, crew, guest …) decide what the app shows. Only invite people you trust with the band’s content.
The app keeps a copy of the band content in your browser storage so it loads fast. It is deleted when you sign out.
Emails (invitation, password reset) are sent through a mailbox at IONOS.
When you set a password we check whether it appears in known data leaks (“Have I Been Pwned”). Only the first 5 characters of a hash leave the server – never the password.

6. Retention

As long as your account exists. If it is deleted, your account data is deleted; content you wrote for the band (e.g. chat messages) stays for the band where needed. On request we delete it.

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection. Write to hello@gigsaw.de. You may also complain to a data protection authority (in North Rhine-Westphalia: LDI NRW).

8. Changes

If Gigsaw changes we update this notice; the date above shows the status.