Privacy Policy

Last updated: 2025-10-06

Controller

Pyrabit UG (haftungsbeschränkt), Kaiserstraße 121, 76133 Karlsruhe, Germany. Represented by Alexander Zimmer (CEO). Contact: info@pyrabit.com

Scope and purposes of processing

• Provision of the website and security (server log files such as IP address, user agent, timestamp) — necessary for technical delivery and defense against attacks.
• Optional analytics with Google Analytics 4 (GA4) to improve our product — loaded only after your consent via Consent Management Platform (CMP).
• Optional advertising with Google AdSense — loaded only after ad-related consent.

Legal bases (Art. 6 GDPR)

• Art. 6(1)(b) and (f) GDPR for strictly necessary processing to provide the service and ensure security (legitimate interests in stable and secure operation).
• Art. 6(1)(a) GDPR for analytics (GA4) and advertising (AdSense) — based on your consent obtained via the CMP. You can withdraw consent at any time with effect for the future.

Cookies and Consent

We use Google Consent Mode to respect your choices. Before you grant consent, we set all consent signals to denied (e.g., analytics_storage, ad_storage), so no non-essential cookies are written. Our CMP (e.g., Google Funding Choices) allows you to granularly grant or refuse categories and to change your preferences at any time.

Google Analytics 4 (GA4)

If you consent to analytics, we load GA4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). GA4 uses cookies or similar technologies to analyze website usage. We configured GA4 with Consent Mode; before consent, only cookieless pings may be sent. After consent, GA4 may set cookies to measure interactions. We have disabled Google signals and rely on aggregated, pseudonymous statistics.

Data may be transferred to Google LLC in the USA. Google relies on the EU Standard Contractual Clauses (SCCs). Further information: Google privacy policy, Ads Data Processing Terms.

Google AdSense

If you consent to advertising, AdSense (Google Ireland Limited) may load to display ads. Ad delivery may involve the use of cookies or similar identifiers. Without consent, AdSense is not loaded.

Recipients

• Hosting and infrastructure providers necessary to operate this site
• Google Ireland Limited (processor) for GA4 and AdSense, subject to consent

Retention

• Server logs: typically 14–30 days, unless longer retention is required for incident analysis
• GA4 event data retention: configured according to GA settings (e.g., 14 months)

Your rights

You have the rights to access, rectification, erasure, restriction, data portability, and to object, as well as the right to withdraw consent at any time (Art. 12–22 GDPR). You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence or place of work.

Contact

For privacy inquiries, contact info@pyrabit.com.

Changes to this policy

We may update this notice to reflect technical or legal changes. The updated date appears at the top.