Privacy and imprint

Media owner and service provider

Ing. Fabian Wimberger
Am Sonnenhang 11, 4240 Freistadt, Austria
contact@fabianwimberger.at

Purpose

Policy-controlled web proxy for approved public websites. No goods or services are sold on this website.

Privacy

The application requires sign-in through Authentik, a separate identity service on the same infrastructure. Authentik manages sign-in. The application sets a necessary HttpOnly, SameSite=Lax proxy session cookie, secure over HTTPS, for up to 24 hours. It associates the signed-in username with target-site cookies held in server memory; these are removed after 24 hours without activity. The app shell uses no analytics, social plugins, external fonts, or third-party scripts.

Fetched pages run on www.browserinbrowser.com, separately from the app controls. They receive expiring links scoped to a target-site origin. Application sign-in cookies and identity headers are not sent to target websites, and fetched pages cannot read the app shell. Passwords remain managed by Authentik.

Proxy request counters are stored per client IP address in memory for the configured rate-limit window. By default the window is 60 seconds, and expired counters are removed automatically.

Addresses typed into the browser bar are sent to the server-side proxy so approved public pages can be fetched, rewritten, and returned to your browser. Private networks, unsupported protocols, and denied hosts are blocked. Approved target sites receive a request from the proxy infrastructure and can process the requested URL, user agent, Accept and Accept-Language headers, timestamp, and proxy IP address under their own terms and privacy notices.

Server logs may process IP address, timestamp, requested URL, referrer, user agent, and HTTP status for delivery, security, and troubleshooting. Legal basis: legitimate interest under Art. 6(1)(f) GDPR. Recipients are the hosting provider and technical service providers. Logs are rotated by size and kept only as long as required for those purposes.

Acceptable use

Use the proxy only for approved public websites you are allowed to access through this service. Respect target-site terms, copyright, robots policies, and rate limits. Proxied pages can run their own scripts and load their own assets through the proxy under the target site's terms and privacy notices.

Your rights

You may request access, rectification, erasure, restriction, portability, or object to processing. You may lodge a complaint with the Austrian Data Protection Authority at dsb.gv.at.