Privacy Policy

General Information

Personal data is any information that can be used to identify you personally. This privacy policy explains what data we collect, how we use it, and your rights.

Responsible Party

The responsible party for data processing on this website is:

Hosting

This website is hosted on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. A data processing agreement (DPA) according to Art. 28 GDPR is in place for the use of Hetzner.

Cloudflare

To ensure security and optimize loading times, we use Cloudflare. In doing so, IP addresses and access data are processed to prevent attacks and deliver content more quickly. Data processing is based on Article 6(1)(f) of the GDPR (legitimate interest in security and fast content delivery). A data processing agreement (DPA) with Cloudflare exists, and standard contractual clauses are also applied.

Contact Form

If you send us an enquiry via the contact form, your details (name, email address, optional subject and your message) are transmitted to us by email and additionally stored in our database (PocketBase), so that no enquiry is lost if the email fails to send. The data is used solely to process your enquiry and remains in our mailbox and in the database for as long as that requires; we delete it afterwards. We will not share this data without your consent. The legal basis is Art. 6 (1) (b) GDPR (contract initiation) or (f) (legitimate interest).

To prevent abuse, your IP address is held in memory for at most ten minutes in order to limit the number of enquiries; it is not stored and not combined with your enquiry. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in protection against mass-sent messages).

Feedback from our browser extensions

We publish browser extensions that include a feedback form. If you send a message through it, your message, the name of the extension you used and — if you choose to provide it — your email address are transmitted to this website. Providing an email address is optional and only needed if you would like a reply.

These details are emailed to us and additionally stored in our feedback database (PocketBase) so that reports remain traceable and can be acted on. Your feedback is not published. We delete entries once they are no longer needed to handle your report.

To prevent abuse, your IP address is held in memory for at most ten minutes in order to limit the number of submissions; it is not stored and not combined with your feedback. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in improving our software and in responding to enquiries).

Cookie Scanner

On this website you can enter any URL and have it checked for the cookies that page sets before a consent decision has been made. The check is performed by our server using an automated browser: the page you name is requested by our server, not by your browser. The site being checked therefore sees the IP address of our server and not yours.

The address you enter and the result are cached in memory for five minutes so that repeated queries for the same address do not trigger another page load. To prevent abuse, your IP address is held in memory for at most ten minutes in order to limit the number of checks per user. The addresses checked are not stored permanently, not logged and not combined with other data; only the domain name of the site checked (e.g. example.com) is recorded in web analytics (see there). The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in operating and protecting the service).

SSL/TLS Encryption

This site uses SSL/TLS encryption to protect the transmission of confidential content. Data you submit cannot be read by third parties.

Web Analytics (Umami)

This website uses Umami Analytics, a privacy-friendly open-source analytics tool. We host Umami ourselves on our own subdomain (measure.datapip.de) — no data is transmitted to third parties.

Measurement is cookieless: no cookies are set, and no information is stored on your device. What is recorded is aggregate information such as the page requested, the referrer, approximate origin, device type and browser. We also record clicks on the navigation and on the contact and purchase buttons, and use of the de-coder and the cookie scanner; for the cookie scanner, also the domain name of the site checked (e.g. example.com), not its full address. IP addresses are not stored. No personal data is collected that would allow the identification of individual users.

As no information is stored on your device and only data your browser transmits with every page request anyway is processed, we do not ask for consent under § 25 TDDDG. Processing is based on Art. 6 (1) (f) GDPR (legitimate interest in optimizing the offering).

Web Analytics (Genug Analytics)

We additionally use Genug Analytics, an open-source analytics tool, to understand how this website is used and to improve it. We host Genug Analytics ourselves on our own subdomain (data.datapip.de) — no analytics provider receives the data.

For each page view or recorded action we record: the address of the page (only the campaign parameters utm_source, utm_medium, utm_campaign, utm_term, utm_content and utm_id are kept from its query string, and any #fragment is removed), the address of the page you came from (referrer), the time, the device type (e.g. mobile), the browser family, your browser's preferred language, and the page's title and language. If you click a link to another website or to a file, its address and link text are recorded. We also record clicks on the navigation and on the contact and purchase buttons, and use of the de-coder and the cookie scanner — in each case which element or function was used. For the cookie scanner we additionally record the domain name of the site checked (e.g. example.com), not its full address; nothing else you enter is recorded.

We do not store your IP address in the analytics data, and we set no cookie for this. Instead, your IP address is shortened (e.g. 203.0.113.47 becomes 203.0.113.0) and combined with your browser's identification string (user agent) and a key that changes every day; only a hash of the result is stored. We can therefore recognise repeated visits on the same day, but not across days. The key is random and is deleted at the end of each day; after that nobody, including us, can link the stored value to an IP address. If the server blocks unusually many requests from one address, that address is noted in the server log (see Logfile Analysis).

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is understanding how our website is used, in order to improve it. No information is stored on your device for this. You are not required to provide this data; if you object, the website works the same. The server is operated by our hosting provider (see Hosting) under the data processing agreement named there. Records are deleted automatically after 13 months.

You can object at any time (Art. 21 GDPR) using the button below. A cookie named genug_optout is then stored in your browser; it records only that you objected, and nothing more is recorded from this browser. It applies only to this website and this browser and lasts 400 days. Storing it is necessary to honour your objection (§ 25 (2) No. 2 TDDDG). We cannot link data already recorded to you, because we do not know which hash is yours (Art. 11 GDPR); it is therefore not deleted individually, but together with everything else after 13 months.

Cookies

This website sets no cookies of its own — neither for analytics nor for language detection. The one exception is the genug_optout cookie, which is set only if you object to web analytics with Genug Analytics (see there). The appropriate language version is selected from the language preference your browser sends (Accept-Language), without anything being stored on your device.

Comparable technologies such as local storage or session storage are not used for recognition either. No consent under § 25 TDDDG is therefore required, and for the same reason there is no cookie banner.

Logfile Analysis

To ensure the proper operation of our website and to protect against cyberattacks, we analyze the logfiles automatically recorded by our server. This includes processing data such as IP address, browser used, operating system, access time, and requested URL. The processing is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR to ensure IT security and to optimize our offer. The stored data is used exclusively for error analysis, attack prevention, and improving system stability.

Your Rights

• Right to access stored personal data (Art. 15 GDPR)
• Right to correct inaccurate data (Art. 16 GDPR)
• Right to delete or restrict processing (Art. 17, 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on legitimate interests (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7 (3) GDPR)
• Right to lodge a complaint with a supervisory authority

You also have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) (f) GDPR (legitimate interest) (Art. 21 (1) GDPR). This applies in particular to web analytics, the cookie scanner, the feedback form for the browser extensions, and the contact form's rate limit. You can also object to web analytics with Genug Analytics directly using the button in the “Web Analytics (Genug Analytics)” section.

To exercise your rights, you can contact the above email address at any time.