Privacy Policy

Last updated: 3 November 2026

Privacy at a Glance

General Notes

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in our privacy policy listed below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator's contact details in the section "Information on the Data Controller" in this privacy policy.

How do we collect your data?

Your data is collected partly because you provide it to us. This may, for example, include data that you enter into a contact form.

Other data is collected automatically or with your consent when you visit the website by our IT systems. This is mainly technical data (e.g. internet browser, operating system or time of page request). The collection of this data takes place automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected in order to ensure error-free provision of the website and to protect it against abuse.

What rights do you have regarding your data?

You have the right to obtain information free of charge at any time about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Data Controller

The data controller responsible for the processing of personal data on this website is:

The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

Hosting

We operate our website on our own servers, hosted by the following infrastructure provider:

Hetzner Online GmbH

Infrastructure provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen

We have full control over the servers and the data stored on them. The infrastructure provider only supplies the hardware and the network connection.

When you visit our website, information is automatically saved on our servers in server log files, which your browser transmits to us.

Details on the infrastructure provider's privacy policy: https://www.hetzner.com/legal/privacy-policy/

A data processing agreement pursuant to Art. 28 GDPR exists with the infrastructure provider.

The use of the server infrastructure is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in a reliable and secure provision of our website.

Server Log Files

Our web server automatically saves information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL
• address requested, status code and volume of data transferred; access tokens and email addresses in the address are replaced by a placeholder before storage
• Time of the server request
• IP address, truncated before storage (without the last octet for IPv4, without the trailing part for IPv6); stored for a maximum of 90 days for abuse prevention on the basis of Art. 6 (1) (f) GDPR

This data is not merged with other data sources.

Server log files are stored for a maximum of 90 days and then automatically deleted, unless a specific security incident requires longer retention. This period serves security, abuse prevention and error analysis: attack patterns, cases of abuse and errors are often only noticed weeks after the request in question.

The collection of this data is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in the technically error-free presentation and optimisation of our website – for this purpose, the server log files must be collected.

SSL/TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Cookies

Our website exclusively uses technically necessary cookies. These cookies are required for the operation of the website and enable basic functions.

Session Cookie

The session cookie is used exclusively to maintain your session and does not contain any personal data. It is valid for a maximum of 9 hours and becomes invalid afterwards.

The storage of this cookie is based on Art. 6 (1) (f) GDPR and Article 99 (5) of the Cypriot Regulation of Electronic Communications and Postal Services Law (Law 112(I)/2004), because the cookie is strictly necessary for the service you requested. We have a legitimate interest in the technically error-free provision of our website.

You can set your browser to inform you about the setting of cookies or to generally reject cookies. If cookies are disabled, the functionality of this website may be limited.

Watched software and alert emails

When you add software to “My software” we store, together with your account, the program, the version, the source of the installation, the package name and your notification settings, as well as every alert we have planned or sent for it. We use these details only to check your software against new versions, vulnerabilities and the end of support and to send you the alerts you asked for.

The legal basis is Art. 6 (1) (b) GDPR, because the alerts are the service you use. Your entries and their alert history are kept until you remove the entry or delete your account; an unsubscription is kept until you switch emails back on or delete your account. You can download all of it at any time in your account settings.

Servers and their daily report

When you add a server we store, together with your account, the name you give it, the programs you picked, a fingerprint (hash) of its server key and the language of its emails. The key itself is shown to you once and not stored. Every time the server reports we store the distribution and its release (for example Debian 12), the time of the report and, for each picked program, the version found and whether it was found.

The command you run on the server sends these details once right away and then once a day through an entry in its crontab, until you remove that entry. The report contains only the distribution, its release and name and version of the picked packages; we do not store the IP address or the hostname of the server with it, and we do not keep the report text itself, only the versions read from it. We use the details only to check the programs of this server against new versions, vulnerabilities and the end of support and to tell you which server is affected.

The legal basis is Art. 6 (1) (b) GDPR, because the check is the service you use. A server and everything stored for it are kept until you remove the server or delete your account. You can download your servers with their programs at any time in your account settings, the key fingerprint is not part of the download.

Email Delivery

For the sending of emails (e.g. confirmations, notifications) we use our own mail servers.

We log every email sent with the recipient address, subject, time, delivery status and text content so that we can trace delivery problems and prove that the email was sent. We delete these entries after 90 days.

The processing is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in reliable email delivery.

Your Rights

Right of Access

You have the right to obtain information free of charge at any time about the personal data stored about you, its origin and recipients, and the purpose of the data processing (Art. 15 GDPR).

Right to Rectification

You have the right to request the correction of inaccurate personal data (Art. 16 GDPR).

Right to Restriction of Processing

You have the right under certain circumstances to request the restriction of the processing of your personal data (Art. 18 GDPR).

Right to Erasure

You have the right to request the deletion of your personal data, unless statutory retention obligations conflict with this (Art. 17 GDPR).

Right to Data Portability

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format (Art. 20 GDPR).

Right to Object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6 (1) (e) or (f) GDPR. You may also object at any time, without giving reasons, to the processing of your data for direct marketing purposes (Art. 21 GDPR).

Right to Lodge a Complaint with the Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR).

In our case (registered office in the Republic of Cyprus), the competent supervisory authority is:
Office of the Commissioner for Personal Data Protection
Iasonos 1, 1082 Nicosia, Cyprus
www.dataprotection.gov.cy

Automated Decision-Making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place on this website.