1. General information
This website is a non-commercial project with free tools and no advertising. Transmission is encrypted via SSL/TLS (shown by "https://" in the address bar).
2. Hosting and server log files
We host this website with G4W.de. Visiting the site automatically creates server log files containing IP address, date/time, and the page accessed – technically required for secure operation (Art. 6(1)(f) GDPR) and deleted automatically after a short time.
After multiple failed attempts, we also briefly store (max. 10 min.) a SHA-256 hash of the IP address to detect automated access loops (Art. 6(1)(f) GDPR).
3. Visitor counter
The visitor counter on the homepage stores the IP address only as a SHA-256 hash to prevent double-counting, deleted automatically after at most one hour. We do not identify individual visitors, and we do not disclose this data to third parties.
4. Cookies and local storage
We use only technically necessary session cookies (e.g. "PHPSESSID") to keep the site and tools working – no consent required (§ 25(2) No. 2 TTDSG in conjunction with Art. 6(1)(f) GDPR). They contain no personal content, end with the session, are not used for advertising/tracking, and can be disabled in your browser at any time.
We also store a few purely technical settings in your browser's local storage (localStorage) – e.g. your theme and language choice, whether you've already seen the language notice, and, for the browser games, high scores and mute settings. These values never leave your browser, contain no personal data, and serve functional purposes only (Art. 6(1)(f) GDPR, § 25(2) No. 2 TTDSG). You can delete them at any time via your browser settings.
5. Contact form
When you use the contact form, we process name, email address, reason for contact, your message, and the captcha answer to handle your inquiry (Art. 6(1)(f) GDPR, and Art. 6(1)(b) for contract-related inquiries). Providing this data is voluntary, but required to handle your inquiry – without it, we cannot respond to your request.
The message is sent via SMTP through our provider G4W.de, without being stored in a database on this website. We keep it only as long as needed to handle your inquiry or as legally required. The captcha is a local arithmetic question with no connection to external services. We do not disclose your data to third parties unless technically or legally required.
To protect against spam, we also briefly store (max. 10 minutes) a SHA-256 hash of the IP address to limit the number of form submissions per connection (Art. 6(1)(f) GDPR).
6. External services
No social media plugins, ad networks, Google Fonts, CDNs, or other external scripts are used. All content is served exclusively from our own server, with no third-party providers involved.
For the Alpha10 Fingerprint-Check, only after separate confirmation directly within the IP tile does your browser query your public IP address from our own server – no external provider involved, shown only locally, and not stored by us. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time with effect for the future, simply by not confirming the query again or by leaving the page without re-confirming.
The Security Update & Zero-Day Monitor fetches and caches public vulnerability data from CISA (cisa.gov) and NIST's NVD (nvd.nist.gov) server-side; your data is never transmitted to these agencies in the process.
7. Your rights as a data subject
Regarding your personal data, you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21 GDPR) – contact the email address given in the legal notice or use the contact form. Complaints can be filed with the competent supervisory authority (Free State of Saxony, Germany) under Art. 77 GDPR.
8. Contact
For privacy questions, please use the email address given in the legal notice or the contact form.
Note on contacting us regarding legal matters
If you believe content on this website violates legal regulations or third-party rights, please let us know directly, without a costly cease-and-desist letter.
We will promptly review and remove or adjust legitimate complaints. Involving a lawyer is generally not necessary for this.
A costly cease-and-desist letter without prior contact contradicts the duty to mitigate damages.
Last updated: July 21, 2026
This English version is provided for convenience. The German original at alpha10.de/datenschutz.php is the legally binding version under German law.