Privacy

Olvito · Yusuf Yildiz

[Straße und Hausnummer], [PLZ] Dortmund

Email: Yusuf.y23@outlook.de

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). On each request Vercel processes technically necessary connection data. The legal basis is Art. 6(1)(f) GDPR — the legitimate interest in operating the site securely and reliably.

The database runs on Supabase in region eu-central-1 (Frankfurt am Main). For transfers to the USA the providers involved rely on standard contractual clauses.

Retrieving a page automatically produces log data at the host: the address requested, the time, the volume transferred, browser type and operating system, and the IP address. This data is not combined with other sources and serves operation and troubleshooting.

No web analytics service such as Google Analytics is used. There is no tracking beyond page requests.

The landing page lets you check any website address. The server retrieves that address and rates publicly visible characteristics. The address entered and the result are stored so the same request can be answered from cache for seven days.

To limit usage, the IP address is not stored — only a hash formed with a secret key. The IP address cannot be recovered from that value. The legal basis is Art. 6(1)(f) GDPR — the legitimate interest in protecting a free service from abuse.

The study at /demo/fluxrate runs a real search against the Google Places API. Only the trade and the place you type are transmitted — no personal data about the visitor. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Here too, only a hash of the IP address is stored for rate limiting, by the same method as the live lab.

The work samples under /demo count how often they were opened. Only a number per page and day is stored — no record per visit, no IP address, no cookies, no third-party analytics service.

So that a reload does not count twice, a hash of the IP address formed with a secret key is kept for 24 hours; the address cannot be recovered from it. The legal basis is Art. 6(1)(f) GDPR — the legitimate interest in knowing whether a work sample that was shown got opened. Pages already running on a customer's own domain are not counted.

Some pages generate text using models from Anthropic PBC (San Francisco, USA). Only what you entered into the relevant form is transmitted — for example floor area and cleaning frequency, or a chosen package. Anthropic does not use content submitted via the API to train its models.

Do not enter personal or confidential details into these fields; the feature does not need them.

If you write to me by email, your details are stored in order to handle the enquiry. The legal basis is Art. 6(1)(b) GDPR for pre-contractual enquiries, otherwise (f). The data is deleted once the enquiry is settled and no retention periods apply.

The area under /dashboard is for internal use only and is password protected. Sign-in runs through Supabase Auth, which sets a session cookie and stores the email address and sign-in times. It has no bearing on visitors to the public pages.

The public pages set no advertising or analytics cookies. Only technically necessary cookies are set: the language choice and, after signing in to the internal area, the session cookie. No consent is required for these under §25(2) TDDDG.

You have the right to information, correction, erasure, restriction of processing, data portability and objection. An informal email to the address above is enough.

You also have the right to complain to a supervisory authority — for North Rhine-Westphalia, the State Commissioner for Data Protection and Freedom of Information NRW.

Live-lab analysis results are discarded after seven days. Rate-limiting hashes stop being evaluated after 24 hours and are deleted regularly. Server logs at the host are deleted according to its own schedule.