Privacy policy
This website sets no cookies and loads nothing from third-party servers, so it needs no cookie banner. This page lists the data that is processed nonetheless and what happens to it.
Courtesy translation. The German version is legally binding.
1. Controller
Cloudstride GmbH
TODO(hans): Straße und Hausnummer
TODO(hans) TODO(hans): Ort
Germany
Managing director: Hans Rauer
Email: info@cloudstri.de
We have not appointed a data protection officer, as we are not required to. For any privacy questions, write to the address above. TODO(hans): confirm
2. In short
- We set no cookies and embed no content from third parties. The fonts are served from our own server too.
- The website runs on our own infrastructure at Hetzner in Germany.
- For visitor statistics we use Umami, self-hosted and cookie-free. IP addresses are not stored.
- We use inquiries by email or through our MCP server only to handle your request.
- No data is transferred to countries outside the EU.
3. Hosting
The website, the MCP server and the visitor statistics run on a server we rent from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in Germany. We have a data processing agreement with Hetzner under Art. 28 GDPR.
4. Server logs
When you open a page, our web server processes technically necessary data: IP address, date and time, the requested address and your browser’s identifier (user agent). We need this data to deliver the website, find errors and fend off attacks.
The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Logs are deleted after 7 days.
5. Visitor statistics with Umami
To understand which pages are read, we use the open source software Umami. We run it ourselves on our server in Germany; the data goes to no one else. The script is loaded from our own domain.
Umami sets no cookies and builds no profiles across websites. It records the page visited, the referring page, browser, operating system, device type and approximate country. Your IP address is not stored. This does not allow us to identify you.
The legal basis is our legitimate interest in privacy-friendly audience measurement (Art. 6(1)(f) GDPR). TODO(hans): define retention period for statistics
6. Contact by email
When you email us, we process your address and the content of your message in order to reply. Our mailbox is hosted by Tutao GmbH (Tuta) in Hanover, Germany.
The legal basis is taking steps prior to or performing a contract (Art. 6(1)(b) GDPR), otherwise our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR). We delete your message once it is no longer needed for that purpose, unless statutory retention periods apply.
7. Inquiries through our MCP server
At https://mcp.cloudstri.de we run an MCP server. AI agents can retrieve information about us there; apart from the technically necessary connection data described in section 4, no personal data is processed.
Agents can also send us a project inquiry this way. We then process the details you give your agent for it: name, email address, optionally company and timeframe, and a description of your request. An inquiry is only accepted if you have agreed to this privacy policy.
The server does not store the inquiry. It forwards it as an email to our mailbox (see section 6). For sending, we use the service Lettermint, based in the Netherlands (TODO(hans): full company name and address), with whom we have a data processing agreement. The content of inquiries is not logged. To limit abuse, the server briefly counts inquiries per IP address in memory, without storing them permanently.
The legal basis is taking steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR).
Please note: whatever you tell your own AI agent is first processed by that agent’s provider. That provider, not us, is responsible for it.
8. Fonts
The fonts on this website (Source Serif 4 and IBM Plex Mono) are served from our own server. Loading a page makes no connection to Google or any other provider.
9. Your rights
You have the right of access to the data we hold about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data on the basis of our legitimate interest, you may object (Art. 21). An email to info@cloudstri.de is enough.
You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: TODO(hans): competent data protection authority (depends on the GmbH's registered seat)
10. No automated decisions
We make no decisions based solely on automated processing and do not create profiles.