Privacy Policy

Controller

The controller for data processing on this website is:

Kode Byte UG (haftungsbeschränkt), Dientzenhoferstraße 21, 80937 Munich, kontakt@kodebyte.net

No data protection officer has been appointed; the conditions of § 38 BDSG are not met.

Hosting and processors

This website runs on a server operated by Contabo GmbH, Munich. The server location is within the European Union; the data arising from hosting is not transferred to a third country.

For sending email we use STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin.

A data processing agreement pursuant to Art. 28 GDPR is in place with both providers.

This statement concerns hosting and the server location; for content embedded from third-party providers, see the section Embedded content.

Server log files and IP addresses

The reverse proxy of this website keeps no access log; requests are not stored permanently together with an IP address.

To prevent abuse, a counter per IP address is stored for the following operations and deleted automatically after 60 seconds: signing in, requesting a password reset, resetting a password, unlocking an account, and submitting the contact form.

If a form submission is rejected by our spam detection, we additionally record the IP address reported with it in the application log of the server, so that mistaken rejections remain noticeable. How long that log is kept depends on the log settings of the server environment and is longer than the 60 seconds of the abuse counter.

In addition, your IP address is transmitted to our self-hosted analytics on every page view; see the section Analytics with Plausible for details.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).

Cookies and storage on your device

This website itself stores only the following technically necessary information on your device:

The locale cookie stores the language version you called up (de or en) so that your next visit is served in the same language. It contains nothing but the language code, cannot be read from JavaScript (HttpOnly), applies to the whole domain and is valid for one year, renewed on every visit.

In your browser local storage we keep, under the key payload-theme, your choice between light and dark appearance once you change it, and under the key cookie-notice-dismissed the fact that you have closed this notice. Both remain in your browser, are never transmitted to us, and can be deleted at any time through your browser settings.

This storage is strictly necessary to provide the service you have expressly requested and therefore requires no consent under § 25 (2) no. 2 TDDDG. For the same reason our cookie notice is a notice and not a consent request: there is nothing to block among the items listed above, and therefore no reject button.

The legal basis for the associated processing is Art. 6(1)(f) GDPR (legitimate interest in a functioning website delivered in the chosen language and appearance).

Contact form

If you contact us via the form, we process the data you provide in order to answer your enquiry.

The data processed in that case is what the form asks for: name, email address, phone number (optional) and your message.

Your submission is then delivered to us by email and additionally stored in the database of this website. In the administration area of the website, stored submissions can be read only by signed-in accounts holding the administrator or editor role; only administrators can delete them.

An automatic acknowledgement is also sent to the email address you provide. For the delivery of these emails your email address is passed to STRATO GmbH, the email provider named above.

The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR.

Retention: deleted once your enquiry has been concluded, unless statutory retention periods under German commercial and tax law apply (§ 257 HGB, § 147 AO).

Data backups

A backup copy of the database behind this website is created daily. It may contain personal data from contact enquiries.

The backups are stored on a server of our own at our registered office in Germany; no third party is involved.

Retention has several layers: of the nightly transfers, the latest 7 are kept; of the backup of the whole system, 7 daily, 4 weekly and 3 monthly states; and in addition, file-system snapshots of the backup directory are taken and kept for 14 days. Older backups are deleted automatically.

We act on erasure under Art. 17 GDPR in live operation without delay; in the backups it takes effect as they expire within the periods stated above.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operational resilience) in conjunction with Art. 32 GDPR.

Analytics with Plausible

We use Plausible Analytics, self-hosted on our own infrastructure. Plausible is cookieless, stores no information on your device and creates no cross-device profiles.

Recorded per page view are: the page requested, the referring source (referrer), browser, operating system and device type, and the country the request comes from.

Your IP address is transmitted to our Plausible server in the process and used there for two purposes. First, together with the browser identification, it is used to derive a daily-rotating, non-reversible counter value by which repeat visits within one day are recognised. Second, the corresponding country is determined from a database held locally on our server and stored together with the page view; no more precise location is determined. The IP address itself is not stored, and once the value rotates it can no longer be related to you.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in privacy-preserving analytics). No consent is required because no information is stored on or read from your device (§ 25(1) TDDDG).

Embedded content

Individual pages of this website may contain videos embedded from YouTube (Google Ireland Limited or Google LLC) or Vimeo (Vimeo.com, Inc.). Whether a page contains such a video is apparent from the page itself.

When you open a page with an embedded video, your browser establishes a direct connection to the servers of the provider concerned. Your IP address and further connection data are transmitted to that provider in the process, and a transfer to the USA, and thus to a third country, is possible. We have no influence on the scope or purpose of that processing.

In this context the providers may also store information on your device or read information from it. Please refer to the privacy notice of the provider concerned for details. The legal basis for the embedding is Art. 6(1)(f) GDPR (legitimate interest in presenting our work attractively).

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR).

You may also lodge a complaint with a supervisory authority (Art. 77 GDPR).

Competent supervisory authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) (Bavarian State Office for Data Protection Supervision), Promenade 18, 91522 Ansbach.

SSL/TLS encryption

This site uses TLS encryption for security. You can recognise an encrypted connection by the "https://" in your browser address bar.

Last updated

17 September 2026