Privacy Policy

1. Data Controller (per GDPR Art. 4 (7))

Responsible for the processing of personal data on this website is:
Justin Schick und Marcel Klaczinski GbR
Hauptstr. 4
76676 Graben-Neudorf
Germany
Email: hello@toolwiki.ai

2. General Information on Data Processing

We process personal data of users of our website only insofar as this is necessary to provide a functional website and our content and services. Processing generally takes place either with consent (Art. 6 (1) (a) GDPR) or to fulfill a contract / legitimate interest (Art. 6 (1) (b) / (f) GDPR).

3. Server Log Files

When the website is accessed, your browser automatically transmits the following data, which is recorded in server logs:

• IP address (truncated after 7 days, fully deleted after 14 days)
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL
• Resource accessed (URL/path)
• HTTP status code

Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in technically faultless presentation and security of the website.
Storage period: 14 days. The data is not merged with other data sources.
Hosting: The website is hosted by Cloudflare Pages (Cloudflare Germany GmbH, Rosa-Luxemburg-Str. 14, 10178 Berlin, Germany · parent: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). A data processing agreement (DPA) under Art. 28 GDPR is in place; transfers to the USA are covered by the EU-US Data Privacy Framework (DPF) and Cloudflare's Standard Contractual Clauses (SCC).

4. Cookies and Similar Technologies

This website uses cookies — small text files stored in your browser to make the site work or to analyze your usage. We distinguish:

4.1 Strictly Necessary Cookies (no consent required)

These cookies are required for the site to function. Examples: storing your cookie consent itself, your selected language (DE/EN), and your theme preference (light/dark).

• toolwiki_consent — stores your cookie consent. Storage: 12 months. Legal basis: §25 (2) (2) TTDSG.
• theme — stores your theme (light/dark). Storage: 12 months. Legal basis: §25 (2) (2) TTDSG.

4.2 Consent-Required Cookies (only after active opt-in)

These cookies are only set if you actively consent in the cookie banner. You can withdraw consent at any time via the cookie manager.

• Affiliate tracking — When you click an affiliate link, the affiliate provider (e.g. Awin, CJ Affiliate, Impact) sets a cookie so that a successful referral can be attributed to toolwiki. These cookies are only set when you actively click an affiliate link — by clicking you give implied consent. Storage: typically 30–90 days depending on the provider.

Currently disabled: Google Analytics 4 and Google AdSense are technically prepared but, as of this notice, are not served. Before we enable Analytics or AdSense, we will extend this section with the specific purpose, storage period, third-country safeguards and your right to withdraw consent.

5. Hosting & Content Delivery

The website is statically rendered and delivered. There is no server-side database — all content is pre-rendered at build time.

• Hosting: Cloudflare Pages (see section 3 for address, DPA and cross-border transfer details). Processed data: server logs (see above).
• Fonts: Inter Variable is served locally via the @fontsource library from our own hosting. Geist Mono and Fraunces (wordmark/logo) are loaded from the Google Fonts CDN (Google Ireland Limited). Loading these two faces transfers your IP address to Google. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a consistent brand presentation). We're evaluating self-hosting both faces in the medium term.
• Site search (Pagefind): Runs 100 % in the user's browser, no server call. Search queries are not logged.

6. Email Contact

If you contact us by email, your information (email address, name, content of your inquiry) is stored to process your request and for follow-up questions. We do not pass this data on to third parties.
Legal basis: Art. 6 (1) (b) GDPR (initiation/performance) or (f) GDPR (responding to your inquiry).
Storage period: Until your inquiry is fully processed, max. 24 months for context retention.

7. Newsletter

We do not currently run an automated newsletter. Newsletter requests reach us only via the email address listed in section 1; we add addresses manually. Once we use a sending service (e.g. Buttondown, MailerLite, Brevo, Beehiiv), we will document the provider, the double-opt-in process, the DPA basis and the cross-border transfer safeguards here — before activating the sign-up form.

8. Affiliate Links

We use affiliate links to external providers (e.g. ChatGPT Plus, Cursor Pro, Gamma Pro). When you click an affiliate link, you are redirected to the destination via the provider's tracking URL. The affiliate provider may then process personal data (IP address, cookie ID, referrer). The processing is done by the respective provider — we have no direct influence on this.

Affiliate links are marked in the source with rel="sponsored" and labelled "Affiliate" in the UI.

9. AI Crawlers / LLM Access

Our robots.txt explicitly allows bots like GPTBot, ClaudeBot, PerplexityBot, and Google-Extended access to all published content for indexing and citation purposes. These crawlers may process the content for training or response purposes — the processing is done by the respective bot provider (OpenAI, Anthropic, Perplexity, Google), and we have no direct influence. If you don't want your inputs in a chat tool to be used for training, check that tool provider's settings.

10. Embeds and External Content

We currently do not embed external content (YouTube, Vimeo, Twitter, Instagram, etc.) that would automatically establish third-party connections on page load. If this changes in the future, embeds will only load after active consent in the cookie banner (two-click principle).

11. Your Rights (GDPR Art. 15–22)

You have the right at any time to:

• Access the data stored about you (Art. 15)
• Rectification of incorrect data (Art. 16)
• Erasure (Art. 17 — "right to be forgotten")
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consents granted, with effect for the future (Art. 7 (3))

Please send requests informally to hello@toolwiki.ai. We typically respond within 30 days (the GDPR deadline).

12. Right to Lodge a Complaint with a Supervisory Authority

You have the right at any time to complain to a data protection supervisory authority — particularly in the EU member state of your habitual residence or the place of the alleged infringement.

For Germany: BfDI (Federal Commissioner for Data Protection and Freedom of Information).

13. Data Security

We use transport encryption (TLS 1.3) throughout your visit. Recognizable by "https://" and the lock icon in your browser's address bar.

14. Currency of This Statement

This privacy policy is currently valid (effective date above). Due to further development of the website or changes in legal requirements, it may be necessary to amend this statement. The respectively current version is always available at /en/privacy/.