Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Benedikt Brunhuber
Sole proprietorship
Bischof-Konrad-Straße 2
93051 Regensburg, Germany
Phone: +49 163 70 20 955
Email: [email protected]

2. Overview

sc4n is a Progressive Web App (PWA) that lets you photograph documents, crop them and save or share them as a PDF. All processing takes place exclusively on your device, in your browser. Photos, scanned pages and PDFs are never transmitted to me or to third parties.

• No analytics, no advertising trackers, no cookies.
• No storage in the browser (no localStorage, no IndexedDB) apart from the app files for offline use.
• No accounts, no registration, no uploads.
• A strict Content Security Policy (connect-src 'none') technically prevents the app from sending data to any server.

3. Camera access

To scan, the app asks for access to the camera through your browser. Access is only granted after your permission and can be revoked at any time in your device settings. The camera image is processed in memory only. Photos are not saved to your photo library or anywhere else. The camera is switched off as soon as you leave the capture screen or the app.

4. Scanned pages and PDF creation

Scanned pages remain exclusively in the memory of the open app. They are deleted when you choose "Start over" or close the app. The PDF is created locally in your browser and contains no location or camera data (EXIF).

The PDF only leaves the app through an explicit action on your part: via your device's share menu or by saving it to the Files app. The provider of the app or recipient you choose is responsible for any further processing. I have no access to the content of your documents.

5. PWA and service worker

The app can be installed as a Progressive Web App. A service worker stores only the app files (HTML, CSS, JavaScript, icons) in the browser cache so that the app works offline. This cache contains no personal data and no scanned content.

6. Hosting (Cloudflare Pages)

The app files are delivered via Cloudflare Pages. When the app is loaded, server log data may be processed for technical reasons (e.g. IP address, time, requested URL, user agent). Cloudflare may also instruct your browser to report connection errors (Network Error Logging). These reports contain technical connection data but no content from the app. Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure and efficient operation). Cloudflare may process data in third countries; appropriate safeguards (e.g. standard contractual clauses) are in place. Details: Cloudflare Privacy Policy.

7. Your rights

With regard to your personal data, you have the following rights:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)

As the app neither stores nor transmits any content, I hold no personal data about you apart from the hosting data mentioned above. You can remove the app cache at any time by clearing the website data or removing the app from your home screen. Please send any requests to [email protected].

8. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. For Bavaria: Bavarian Data Protection Authority (BayLDA).

9. Changes to this privacy policy

I reserve the right to amend this privacy policy so that it always complies with current legal requirements or reflects changes to the app. Last updated: October 2026.