Legal

Privacy Policy.

Last updated: November 4, 2026

This privacy policy explains which personal data is processed when you visit mviewer.racespot.digital, the product page of the NDI MViewer app, and when you send us feedback through the form on this site or in the app. The app's settings and its App Store listing link to this policy as well.

1. Summary

This is a static product page. There is no shop, no customer account, no newsletter and no advertising. The site sets no cookies, uses only cookieless, self-hosted reach measurement (Umami) and loads nothing from third parties, so there is no consent banner.

One thing happens automatically when you visit: our server writes a log entry. Everything else happens only if you write to us through the feedback form.

2. Controller

Racespot Media House GmbH
An der Hasenkaule 10 (21D)
50354 Hürth, Germany

Managing Director: Philip Stamm
Commercial register: Amtsgericht Köln, HRB 118561

Email: info@racespot.digital
Phone: +49 (0)163 686 7887

Racespot Media House GmbH operates under the brand Racespot.digital. Further details are in the imprint.

3. Hosting and server log files

This website and the feedback service run on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in Nuremberg, Germany, and is administered by us with the deployment tool Coolify, which runs on the same server. A data processing agreement under Art. 28 GDPR is in place. Privacy: hetzner.com/legal/privacy-policy

When you open a page, your browser necessarily transmits data to our web server (nginx), which writes it to a log file:

  • the IP address of your device
  • the date and time of the request
  • the page or file requested, the status code and the amount of data transferred
  • the referring page, if your browser sends one
  • your browser and operating system (user agent)

We use these entries only to deliver the pages securely and to investigate faults and attacks. They are not combined with other data and are not used to build profiles.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure, functioning website.
Retention: seven days, longer only if a specific incident requires it.

4. Fonts, design and other files

All fonts (Space Grotesk, Inter, Space Mono), images and scripts are delivered from this server. No connection to Google Fonts or any other font provider is made.

The colours and spacing of the page come from a small stylesheet (/design/racespot-tokens.css) on racespot.digital, our own main website, which runs on the same infrastructure in Germany. That request reaches only our own server and is logged as described in section 3; no third party is involved.

The “Updates” section loads the release log (/assets/data/changelog.json) from this server. This is an ordinary request as described in section 3; no further data is processed.

5. Cookies and browser storage

This website sets no cookies and stores nothing on your device during a normal visit. There is no tracking pixel and no cross-site tracking; the reach measurement described in section 6 works without cookies.

Feedback tool for our team

Our own team uses an internal feedback tool for change requests to this site. For visitors it is switched off: nothing is loaded and nothing is stored. Only when a team member signs in at analytics.racespot.tv (our own server at Hetzner in Germany) does the page store the entry rsfb in the browser's local storage. It holds a signed proof that unlocks the feedback button on this device for 30 days; the button checks it with analytics.racespot.tv. It can be removed at any time in the browser settings.

6. Reach measurement without cookies (Umami)

To find out how many people read this page, we use Umami, an open-source analytics tool that we host ourselves at stats.apps.racespot.tv on our own server in Germany. No data leaves our infrastructure and no third party is involved.

Umami works without cookies and stores no personal data. Your IP address is not retained; visitors are counted using an anonymous hash that is regenerated daily and cannot be traced back to a person or linked across days. What we see is aggregated: page views, referring sites, language version, country, browser and device type, and clicks on the App Store buttons.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in understanding how our site is used. Because no personal data is processed, there is nothing to object to and nothing to erase. You can still block the script stats.apps.racespot.tv/script.js in your browser; the site works without it. More about the tool: umami.is

7. Feedback form (website and app)

The “Feedback & updates” section of this site and the “Send feedback” screen in the app's settings send your message to our own feedback service at mviewer.racespot.digital/api/feedback, which runs on the server described in section 3. No third-party form provider is involved.

What is stored

  • your message (required, up to 5,000 characters)
  • your email address (optional), only if you enter it because you would like a reply
  • where it was sent from: the page path (for example /de/) or, from the app, the screen (for example app:settings), and the language of the page or device
  • your browser or app identification (user agent). Messages from the app also end with a line naming the app version, operating system version and device model, so we can reproduce what you report
  • the time of submission

Submissions are stored in a file (feedback.jsonl) on a persistent volume of our server in Germany. Only our team can read it, protected by an access token.

Spam protection

Before you send, the form fetches a short-lived, single-use token from the same service; it contains no personal data. To limit the number of submissions per sender within ten minutes, the service uses your IP address. It is held only in the service's working memory and is never written to the stored submission or any file; it is removed automatically about ten minutes after your last submission, and in any case when the service restarts. Messages that trip our content filters (for example many links or known spam phrases) are kept in a separate quarantine file, so that genuine messages can be recovered.

Purpose, legal basis and retention

We use this data to read and act on your feedback about NDI MViewer and, if you gave us your email address, to reply. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in improving the app and answering our users; where your message concerns your subscription or another contract with us, Art. 6(1)(b) GDPR. Providing an email address is voluntary; without it we cannot reply.

We delete submissions once they are dealt with and no retention obligation applies, as a rule after two years at the latest. You can ask us to delete your submission earlier at any time at info@racespot.digital; please mention roughly when you sent it.

8. App Store and other links

The App Store buttons, the link to Apple's licence agreement (Terms of Use) and the link to racespot.digital are plain links. Nothing is loaded from Apple while you are on this site; Apple processes data only after you click such a link, under its own privacy policy (apple.com/legal/privacy). Our server limits the referrer sent along to the address of this site.

9. The NDI MViewer app

Because the app links to this policy, here is what the app itself does with data:

  • No account. The app works without signing in with us.
  • NDI® traffic stays in your network. Video and audio from NDI sources in your local network, or from an NDI Discovery Server you configure, are processed on your device only and never reach our servers.
  • Subscription. Purchases and the Multiview Pro subscription are handled entirely by Apple through the App Store. We receive no name, address or payment details; the app checks the subscription status with Apple.
  • Feedback. The “Send feedback” screen posts to the service described in section 7, with the same data and purposes.
  • No analytics, advertising or crash-reporting SDK of our own. Apple may collect diagnostics according to your device settings; that processing is governed by Apple.

10. Legal bases at a glance

  • Art. 6(1)(b) GDPR: feedback that concerns your subscription or another contract with us
  • Art. 6(1)(c) GDPR: statutory retention obligations
  • Art. 6(1)(f) GDPR: secure operation of the site, server log files, cookieless reach measurement (Umami), feedback form and its spam protection, the team's feedback tool

We do not rely on consent (Art. 6(1)(a) GDPR) on this website, because nothing here requires it.

11. Data retention

  • Server log files: seven days, longer only if a specific incident requires it
  • Feedback submissions: until dealt with, as a rule no longer than two years
  • IP addresses for the feedback rate limit: working memory only, removed about ten minutes after the last submission
  • Reach measurement (Umami): no personal data is stored
  • Business correspondence subject to commercial or tax law: six or ten years (§ 257 HGB, § 147 AO)
  • rsfb (team members only): 30 days, removable at any time in the browser

12. Recipients and international transfers

Personal data processed on this site stays on our servers in Germany (hosting: Hetzner Online GmbH, see section 3). We do not pass it on to third parties for their own purposes and do not transfer it to countries outside the EU/EEA. Apple only becomes involved when you yourself go to the App Store or buy a subscription in the app.

13. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you (Art. 15)
  • have inaccurate data corrected (Art. 16)
  • have your data erased (Art. 17)
  • have processing restricted (Art. 18)
  • receive your data in a portable format (Art. 20)
  • object to processing based on legitimate interests (Art. 21), including the processing described in sections 3 and 6

To exercise these rights, an email to info@racespot.digital is enough.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestr. 2–4, 40213 Düsseldorf, Germany (ldi.nrw.de).

14. Security

The site and the feedback service are delivered only over HTTPS with a valid certificate, and the server sends standard security headers. The feedback inbox is protected by an access token known only to our team. We keep the software we run up to date.

15. Changes to this policy

We update this policy when the site, the app or the law changes. The date at the top shows the current version, which is always available at mviewer.racespot.digital/privacy.

Imprint Back to NDI MViewer