Privacy notice

Controller

Language preference

At the start address, we use your browser’s language settings to choose an available edition. If you select a language from the menu, we save that choice locally in this browser (localStorage) until you clear the site’s stored data. This preference is used only for language selection and is not sent to analytics. Direct links to a language edition keep their stated language.

Visiting the website

A website visit necessarily processes connection data. This can include your IP address, the time and requested URL, browser and device details, and server response information. Requests pass through Cloudflare to our web server hosted by Hetzner. This is necessary to deliver the site and detect attacks or technical problems. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the site. The site cannot be delivered without this processing.

We have not configured a separate log of individual AIxploit page requests at the origin server. Cloudflare may log technical requests and security events as part of its services. Retention depends on the type of data and the service settings; we use this information only as needed for operation and security.

Cloudflare and international processing

Cloudflare processes requests on a global network. Cloudflare says it processes technical metadata in the United States and Europe. Its data processing agreement provides for EU Standard Contractual Clauses, among other safeguards, for transfers from the European Economic Area. The linked documents explain Cloudflare's processing and contractual protections.

• Cloudflare privacy policy
• Cloudflare data processing addendum

Contacting us by email

If you email us, we process your address, message and associated technical email data to answer your inquiry or review an editorial correction. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is handling inquiries and corrections. We use Google's Gmail for email contact. Google may process email data outside the European Economic Area. We keep correspondence only as long as needed to handle it and, where applicable, meet legal obligations.

• Google privacy policy

Cookies and analytics

We use Umami on our own server at Hetzner to understand how our public website is read. It records pageviews, visited pages and language editions, referring website domains, browser and device types, browser language, and approximate country and, where available, region and city. Location is estimated from connection data; it is not GPS data. IP addresses are processed for this purpose and for short-lived pseudonymous visit identifiers, but are not stored in the analytics database. No tracking cookies, advertising profiles or session recordings are used.

We also record the time a page is open in a visible browser tab and one-time content scroll milestones at 25%, 50%, 75% and 100%. These are limited events, not recordings of mouse movements or page contents, and do not establish whether someone actually read the text.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is understanding readership and improving the site through limited audience measurement. Analytics records in the live database are deleted after 180 days; protected backups may retain older copies until those backups are deleted; they are used only for recovery. URL query parameters and fragments, full referring paths and screen resolution are excluded. Browser Do Not Track and Global Privacy Control signals are respected.

You can disable audience measurement through your browser’s Do Not Track or Global Privacy Control setting. Any previously saved opt-out for this browser remains effective. Preferences apply separately to each browser and device. Fonts are served locally. Cloudflare may set technically necessary security cookies.

Links to other websites

Our articles link to external sources. You visit another website only when you follow a link. That site's operator provides information about its own data processing.

Your rights

Subject to the GDPR, you may request access, rectification, erasure, restriction of processing and, where applicable, data portability. You may object on grounds relating to your particular situation to processing based on Article 6(1)(f) GDPR. Contact us at the email address above to exercise these rights.

You may also complain to a data protection supervisory authority, such as the Hamburg Commissioner for Data Protection and Freedom of Information. We will update this notice if our technical or organizational processing changes.

• Hamburg data protection authority complaint page