Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Email: admin@michaeluhrich.xyz

Further legal information is available in our Legal Notice.

2. General Information

We process personal data only to the extent necessary to provide and secure this website, measure its use in a privacy-friendly manner, manage voluntary early-access registrations and respond to enquiries.

We do not sell personal data and do not use personal data for advertising or cross-site profiling.

3. Hosting

This website is hosted on a self-managed Virtual Private Server provided by:

IONOS provides the underlying information technology infrastructure, including server hardware, storage capacity, computing capacity and network connectivity. The website and its applications are administered by us.

The server location is Germany (European Union).

When the website is accessed, technical information may be processed in server logs where necessary for delivery, troubleshooting and security. This may include the IP address, date and time of the request, requested resource, HTTP status code, referrer and user-agent information.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and technically correct operation of the website.

Log data is retained only for as long as it is required for technical operation, troubleshooting or security purposes and is deleted when it is no longer required, unless further retention is necessary to investigate a security incident or comply with a legal obligation.

IONOS acts as a processor where applicable.

Privacy information from IONOS is available at:

https://www.ionos.de/terms-gtc/terms-privacy

4. Privacy-Friendly Analytics with Matomo

We use a self-hosted installation of Matomo to obtain aggregated information about the use of InfraVerdict and to evaluate interest in the planned service.

For InfraVerdict, analytics are collected exclusively server-side through our backend using Matomo's HTTP Tracking API.

No Matomo analytics cookies are stored on your device, no Matomo JavaScript tracker is loaded in your browser, and your browser does not communicate directly with the Matomo server.

We use Matomo to measure, in particular:

• page views,
• clicks on the “Audit my Docker stack” call-to-action,
• successful early-access registrations.

The email address submitted through the early-access form is not transmitted to Matomo.

Analytics data and early-access registration data are kept separate. We do not use a common user identifier to link these datasets.

We do not transmit the visitor's email address, full client IP address, browser user-agent, referrer, query parameters or signup identifier to Matomo.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest is to understand whether there is demand for InfraVerdict and to improve the website while minimising the processing of personal data.

Matomo analytics data is automatically deleted or aggregated according to our configured retention settings when detailed data is no longer required.

We do not use Matomo data for advertising, behavioural profiling or tracking visitors across different websites.

5. Early Access Registration

You may voluntarily register to receive information about the launch of InfraVerdict.

For this purpose, we process only:

• your email address,
• the date and time of registration.

Your email address is stored in a private database on our server.

We do not permanently store your IP address, browser information, device information or location as part of the early-access registration.

The email address is used solely to contact you about the launch or availability of InfraVerdict.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future by contacting:

admin@michaeluhrich.xyz

After withdrawal, your email address will be deleted unless we are legally required to retain it for another reason.

Early-access data will otherwise be deleted once it is no longer required for the launch and validation of InfraVerdict.

The early-access database is not exposed through a public web interface or public API.

6. Protection Against Abuse

The early-access form uses technical measures to protect the service against automated abuse.

These measures may include rate limiting and an invisible honeypot field.

An IP address may be processed temporarily in memory for rate-limiting purposes. It is not stored permanently for this purpose. The application uses a non-reversible, salted representation where necessary for temporary rate-limit handling.

No IP address is added to the early-access database.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is protecting the website and its technical infrastructure against abuse and automated attacks.

7. Contact by Email

If you contact us by email, we process the information you provide, including your email address and the contents of your message, in order to respond to your enquiry.

Depending on the nature of your enquiry, the legal basis is Art. 6(1)(b) GDPR where the communication relates to a contract or pre-contractual measures, or Art. 6(1)(f) GDPR for other enquiries.

The data will be deleted when it is no longer required for the purpose of the communication, unless statutory retention obligations apply.

8. Cookies and Tracking Technologies

InfraVerdict does not use advertising or marketing cookies.

InfraVerdict does not use analytics cookies and does not load a client-side analytics tracker.

Analytics events are sent from our own backend to our self-hosted Matomo instance. No analytics information is stored on or retrieved from the visitor's device for this purpose.

9. Recipients of Personal Data

Personal data is disclosed only where necessary for the operation of this website, where we are legally required to do so, or where you have given your consent.

Our hosting provider, 1&1 IONOS SE, may process data on our behalf as part of providing the server infrastructure.

We have entered into the applicable data-processing arrangements with our infrastructure provider.

10. International Data Transfers

The website, early-access database and self-hosted analytics used for InfraVerdict are operated on infrastructure located in Germany.

We do not intentionally transfer early-access registration data to recipients outside the European Economic Area as part of the functionality described in this Privacy Policy.

If this changes, this Privacy Policy will be updated accordingly and any legally required safeguards will be implemented before such processing takes place.

11. Your Rights

Under the GDPR, you may have the following rights, subject to the applicable legal requirements:

• the right of access under Art. 15 GDPR,
• the right to rectification under Art. 16 GDPR,
• the right to erasure under Art. 17 GDPR,
• the right to restriction of processing under Art. 18 GDPR,
• the right to data portability under Art. 20 GDPR,
• the right to object under Art. 21 GDPR,
• the right to withdraw consent at any time under Art. 7(3) GDPR.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, contact:

admin@michaeluhrich.xyz

You also have the right to lodge a complaint with a competent data protection supervisory authority.

12. Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration or disclosure.

In particular, the InfraVerdict early-access database is stored outside the publicly accessible web root and is not available through a public read, export or administration endpoint.

Access to the database is restricted to the backend service required to process early-access registrations.

13. Changes to this Privacy Policy

We may update this Privacy Policy if InfraVerdict, the technical infrastructure or the applicable legal requirements change.

The current version is always available on this page.