Privacy Policy
Last updated: continuously
The short version
- No recognition across visits and no analysis of individual people.
- No third-party analytics services such as Google Analytics, Matomo, Plausible or similar.
- Only our own cookie-free, anonymous reach measurement that never stores your IP address.
- No advertising or marketing cookies.
- No third-party cookies.
- No external fonts, no social media plugins, no embedded third-party content.
- No profiling, and no sharing or selling of data.
- No registration and no user account required.
1. Data controller
For privacy enquiries please use the contact form.
The legal notice page publishes a portrait photo of the controller. The legal basis is the legitimate interest in transparency and identification towards visitors (Art. 6(1)(f) GDPR).
2. Anonymous reach measurement instead of tracking
This website does not use tracking in the classic sense: no third-party web analytics services, tracking pixels, heatmaps, A/B testing tools or advertising networks are in use. No usage profiles are created, you are not recognised across visits, and no data is passed on to or sold to advertising or analytics providers.
To see how much the site is used, this website runs its own cookie-free reach measurement. Per page view it stores: the page requested, date and time, a coarse city-level location, browser, operating-system and device family (each without version details) and the origin of the visit, i.e. the referring site or search engine and any campaign parameters in the link (utm_*). Your IP address is neither stored nor logged; it is used only transiently for the coarse location. No cookies are set and no identifiers are placed on your device, so individual visitors cannot be recognised. Automated bot requests are filtered out, taking into account not only the user-agent string but also HTTP headers and unusual behaviour patterns such as extremely rapid page sequences. The legal basis is the legitimate interest in statistical reach analysis and in developing the site to meet actual demand (Art. 6(1)(f) GDPR).
To tell genuine visits apart from automated requests, the site additionally sends a single anonymous signal once real usage happens in the browser (e.g. scrolling, pointer movement or a key press after a few seconds of visibility). Only the fact "usage confirmed" is transmitted – no content, no mouse tracks, no identifier. This signal is used purely statistically to clean bot traffic out of the visitor count.
If someone clicks the link to a provider on a tool page, that click is counted anonymously – only the tool concerned and the target host are stored, never an identifier of the person. These figures are used solely for aggregated reach analysis; if they are shared with providers, this happens only in aggregated form (totals and shares), never related to individuals. The legal basis is the legitimate interest in the economic evaluation and further development of the site (Art. 6(1)(f) GDPR).
No third-party cookies are set either. The site loads all its content — including fonts and every tool icon — exclusively from its own server. Your browser therefore establishes no connection to third-party servers when visiting this site. Only on the server side is the IP address passed to a geolocation service for a coarse location (see the section on server log files).
3. What is stored locally on your device
A small number of entries are stored in your browser's storage so the site can work. They contain no personal data and are not transmitted to the server — with the exception of the strictly necessary CSRF token.
| Entry | Type | Purpose | Duration |
|---|---|---|---|
| ki-pyramide-lang | localStorage | Remembers your selected display language (German/English). | Until you clear your browser storage. |
| ki-intro-played | sessionStorage | Ensures the intro animation only plays once per session. | Until you close the browser tab. |
| ki-pyramide-notice | localStorage | Remembers that you acknowledged the privacy notice. | Until you clear your browser storage. |
| ki-recent-tools | localStorage | Stores the slugs of the last viewed tool detail pages (up to 8 entries). | Until you clear your browser storage. |
| CSRF token | Cookie (strictly necessary) | Protects the contact form and server requests against abuse from other websites. | Session only. |
You can delete these entries at any time via your browser settings. The site remains fully functional afterwards — it simply starts again in the default language.
4. Server log files
As with any web server, technical access data is processed when the page is requested: IP address, date and time, the address requested, the volume of data transferred, browser type and operating system. This data is technically required to deliver the page and serves operational security and abuse prevention. It is not combined with other data sources and is not used to analyse individual visitors. The legal basis is the legitimate interest in secure and uninterrupted operation (Art. 6(1)(f) GDPR).
In addition, the server keeps an anonymous access count in order to see how heavily the site is used and what share of that is search-engine crawlers. Only the address requested, the country of origin, the approximate region and city, the type of referring source (e.g. search engine or direct visit), the device category, browser and operating-system family and the browser language are stored. No cookies are used for this and no IP addresses are stored: to roughly distinguish visits, a short-lived check value is generated that is hashed with a secret which rotates daily and cannot be reversed. Recognition beyond a single day, profiling or attribution to a person is therefore impossible. The data is evaluated only in aggregate, deleted automatically after 90 days and never passed on to third parties. The legal basis is Art. 6(1)(f) GDPR.
To determine the approximate region and city, the IP address of the request is sent once, server-side, to the service ip-api.com (IP-API.com, Fastly infrastructure) and resolved there into a coarse location. The request is made exclusively by this website's server — your browser does not connect to any third party. The IP address is neither stored nor logged by this website; only the city, region and approximate city-level coordinates are retained. The legal basis is the legitimate interest in aggregated reach measurement (Art. 6(1)(f) GDPR).
5. Contact form
If you use the contact form, only the details you enter yourself are processed: name, email address, type of enquiry and your message. These details are delivered as an email to the controller and are used solely to handle your enquiry. To prevent automated bulk submissions, the number of submissions per IP address is briefly limited. The legal basis is Art. 6(1)(b) or (f) GDPR. Messages are deleted once the enquiry has been fully handled and no statutory retention obligations apply.
6. AI Tool Finder
The optional AI Tool Finder answers questions about the tool catalogue on this site. It only starts once you open it yourself and ask a question. Your question is transmitted to an AI service for answering and processed there. No chat histories are stored on this website; when you close the window, the history is gone. Please do not enter personal or confidential information into the chat. The legal basis is your active use of the feature and the legitimate interest in a user-friendly search (Art. 6(1)(f) GDPR).
7. Links to external tools
This site links to the websites of the AI providers presented. Only when you click such a link do you leave this website, and the privacy policy of the respective provider applies — including their own cookies and tracking mechanisms. We have no influence over this. Further notes can be found in the disclaimer.
8. Your rights
You have the following rights:
- Access to the data stored about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Lodging a complaint with a supervisory authority (Art. 77 GDPR)
Since this website creates no visitor accounts and its reach measurement is anonymous, without identifiers and without storing your IP address, as a rule no personal data about you exists apart from a contact enquiry. The measurement data cannot be attributed to a person.
9. Legal bases
Processing is based on Art. 6(1)(b) GDPR (handling your enquiry) and Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning service). Storage of information on your device is limited to entries that are strictly necessary for the service you explicitly requested, or purely functional (§ 25(2) TDDDG). No consent-requiring tracking or advertising technologies are used.
This privacy policy is not a substitute for legal advice. For specific legal questions, we recommend consulting a lawyer.