Hosted in Germany
Disfora's servers, database and files are at Hetzner in Nuremberg, Germany.
A privacy-friendly comment system, hosted in the EU.
Disfora runs on servers in Germany and renders in your page, not in a third-party frame. Below is every cookie it sets and everyone who processes data for it, so you can write your own privacy notice.
What makes it privacy-friendly
In your page, not a frame
Comments render in your page from one script tag, without a third-party iframe loading under every post.
First-party cookies
Set up comments.yoursite.com and readers' sign-in cookies are set on your own domain, so browsers don't block them as third-party.
No analytics
Disfora runs no analytics on your pages, on disfora.com or in the dashboard, and serves its own fonts and scripts.
Guests with just a name
Readers can comment without an account. Their IP address is used for rate limits for a few minutes and never stored with the comment.
Your own copy
Webhooks send each comment to your server with the author's username or guest name, never their email or IP address.
Sub-processors, for your GDPR notice
Everyone who processes personal data for Disfora, and what they receive.
| Who | What for | What they receive |
|---|---|---|
| Hetzner Online | Servers, database and file storage in Nuremberg, Germany | Everything Disfora stores |
| Cloudflare | Network, DNS and protection in front of disfora.com | IP addresses and requests passing through |
| Cloudflare Turnstile | Checks guest comments, forms and contact messages come from a person, with your own Turnstile keys | A verification token and the IP address |
| Klipy | GIF search and sponsored GIFs in the comment editor | Search terms, user agent, device details and a random ID; year of birth and gender for signed-in readers; the IP address when GIFs load |
| Sign in with Google, for readers who choose it | The sign-in request; Google sends back the name, email and profile picture | |
| Dodo Payments | Billing for paid plans (site owners only) | Email, name, plan and payment details |
Emails are sent from Disfora's own mail server. Comments and form submissions on your site are visible to you and your team, and form submissions are yours as the controller: Disfora processes them on your behalf.
What's stored, and for how long
- Comments keep the author's account or guest name, the text and the time. No IP address or user agent.
- Form submissions keep the answers, the page address, the user agent, the referrer and one-way hashes of the IP address and device, until you delete them.
- Imported Disqus and Commento comments keep the author's name, not their email.
- Webhook deliveries in your delivery log are deleted after 30 days, and uploaded import files when the import finishes.
- Deleting a project deletes its comments, ratings, polls, forms and submissions.
Comments that stay on your site
The free plan covers one site, takes a few minutes to set up and doesn't need a card.