Legal
Privacy policy
1. Controller
Leif-Erik Hallmann
Graf-Egbert-Ring 13
25524 Itzehoe
Email: contact@rtttl.com
2. Hosting and security logs
The host may process connection details such as IP address, request time, requested path, browser information and error data to deliver and secure the service. Add the actual hosting provider, retention period, legal basis and any data-processing agreement.
3. Accounts
Registration stores a display name, email address, password hash, account role and status, and timestamps for creation, confirmation and sign-in. The display name is shown with public uploads; the email address is not displayed publicly.
4. Ringtones, favorites and usage counters
Private and public uploads contain the supplied RTTTL string, title, credits, genre, tags, description, sharing basis and publication state. Public uploads and their uploader display name are visible to everyone. Favorites are linked to the member account. Play and download totals are public; repeated events are deduplicated in the browser session for a limited time and are never used to lock playback or downloads.
5. Tool hand-offs and local editor recovery
When a player, editor or converter result is sent to the account workflow, a random server-side draft containing the RTTTL string and requested action is retained temporarily. Expired drafts can be removed automatically. The graphical editor also stores a recovery copy in the browser's local storage until it is dismissed or a save action is submitted.
6. Reports and moderation
Reports store the reporting account, selected reason, message, affected ringtone, review status and timestamps. Moderation decisions may store an administrator, note and audit entry. These records support community safety, rights complaints and accountable administration.
7. Contact and email
Contact details, subject and message are sent to the configured mailbox; the application does not separately store contact requests in its database. Confirmation, password-reset and contact messages use the configured SMTP provider. Name the actual provider and retention arrangements.
8. Cookies and optional reCAPTCHA
The service uses necessary session and optional remember-me cookies. If enabled, Google reCAPTCHA v3 protects registration, login, account-email requests, contact and ringtone-report forms and may process IP address, browser and interaction data. Document the applicable legal basis, provider, retention and international transfers before enabling it.
9. Optional advertising
Google AdSense is disabled in the supplied configuration. If the operator enables it, Google advertising code is loaded on selected public content and tool pages, but not on account, contact, legal, private collection or administration pages. Depending on the operator’s AdSense and consent settings, Google and its partners may process device identifiers, IP address, browser information, page interactions and cookies or similar storage to deliver, measure and prevent abuse of advertising. Before launch, name the actual providers and partners, purposes, legal basis, retention periods, international transfers, consent-management platform, withdrawal route and whether personalized or non-personalized ads are used.
10. Your rights
Add the jurisdiction-specific information about access, correction, deletion, restriction, portability, objection, withdrawal and the competent supervisory authority. Account owners can already edit or delete their own ringtones; contact the operator for account-level requests.