Zaloguj się

Polityka prywatności

General Notice and Mandatory Information

Designation of the Responsible Entity

The responsible entity for data processing on this website is:

SEOFuxx
c/o HOST-X
Kolonnenstr. 8
10827 Berlin
Managing Director: Dipl.Wirt.-Ing. Nick Herrmann

The responsible entity decides alone or together with others about the purposes and means of processing personal data (e.g., names, contact details, cookie IDs, device identifiers, etc.).

Withdrawal of Your Consent to Data Processing

Some data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. An informal message by email is sufficient. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

Right to Lodge a Complaint with the Competent Supervisory Authority

As a data subject, you have the right to lodge a complaint with the competent supervisory authority in case of a data protection violation. The competent supervisory authority for data protection matters is the state data protection officer of the federal state where our company is headquartered. For Berlin, this is the Berlin Commissioner for Data Protection and Freedom of Information. A list of data protection officers and their contact details can be found here: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties in a structured, commonly used and machine-readable format. If you request direct transfer of the data to another controller, this will only be done to the extent technically feasible. To do so, send us a request using the contact options in the legal notice.

Right to Information, Correction, Blocking and Deletion

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin, its recipients and the purpose of the data processing and, where applicable, a right to correction, blocking or deletion of this data. For this and for further questions about personal data, you can contact us at any time using the contact options in the legal notice. You can also change your profile and your master data directly in your user account.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption (currently TLS 1.3). This means that data you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line in your browser and the lock symbol in the browser line.

Server Log Files

The website provider automatically collects and stores information in server log files that your browser automatically transmits to us. These are:

  • Visited page on our domain
  • Date and time of server request
  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • IP address (anonymized after 24 hours)
  • Amount of data transferred
  • Access status/HTTP status code

No merging of this data with other data sources takes place. The basis for data processing is Art. 6 para. 1 lit. f GDPR (legitimate interest in ensuring system security and stability). The data is automatically deleted after 30 days.

Cookies and Local Storage

We only use technically necessary cookies and browser storage. There are no tracking, analytics or advertising cookies and therefore no cookie banner with choices. The following entries may be set:

  • Session cookie: keeps you signed in. It is deleted when you sign out or the session expires.
  • Language cookie (lang_choice): remembers the language you chose in the footer. Duration: 1 year.
  • Local storage of your browser: after sign-in, your username and user ID for display in the interface, plus settings such as color scheme, collapsed sidebar and selected view. The number of failed sign-in attempts is kept in the browser for the current session only.

The legal basis is Art. 6(1)(f) GDPR and Section 25(2) No. 2 TDDDG (strictly necessary for the service you requested).

User Account and Sign-In

For a user account we store your email address and your password (only as a hash, never in plain text). You can optionally add a profile with name, short description and profile picture, as well as master data (company, name, street, postal code, city, phone). We store profile and master data in encrypted form. For sign-in you can set up two-factor authentication and passkeys; for this we store the required security data (e.g. passkey identifier and public key). API keys for the interface are stored only as a hash.

When you reset your password, we send you an email through our own mail server (SMTP) and store the IP address of the request.

The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and, for the IP address during a reset, Art. 6(1)(f) GDPR (protection against abuse).

Activity Log

To keep your account secure, we log certain events: sign-in (successful or failed), password reset, as well as created invoices and payment events. We store the time, your IP address and the browser identifier (user agent). The basis is Art. 6(1)(f) GDPR (legitimate interest in the security of our service and in proof of payment events). We keep the entries as long as they are required for this purpose and delete them on request unless statutory retention duties apply.

SEO Analyses and Service Providers Involved

When you start an analysis, we store the URL you entered, the keyword and the analysis results. For analyses without signing in, we additionally store your IP address to limit the number of free analyses per day (Art. 6(1)(f) GDPR). For the analysis itself we use service providers to whom we transmit only the details required:

  • Google PageSpeed Insights (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland): the URL to be checked.
  • DataForSEO: domains, keywords and search queries for keyword, backlink and AI visibility data.
  • OpenAI (OpenAI Ireland Ltd. or OpenAI, L.L.C., USA): domain, analysis data and the HTML content of the checked page for the AI evaluation.
  • Google Search Console (only if you connect it yourself): the connection uses Google OAuth. We keep the access tokens only in your session and do not store them permanently.

Do not enter personal data of third parties into the analysis. The legal basis is Art. 6(1)(b) GDPR (performing the analysis you requested).

AI Visibility Tracking

If you use AI Visibility Tracking, we store your tracking profile with brand, domain, aliases, competitors and the prompts you approved. For each measurement we send the prompt, language and country through DataForSEO to AI search systems (for example ChatGPT Search and Google AI Overviews). We store the answer texts, the brands mentioned and the sources cited in order to calculate metrics such as mention rate, citation rate and share of voice. We never generate prompts automatically with personal data; do not enter personal data of third parties into your own prompts.

We delete the raw answers after the retention period you set in the profile (default: 180 days). The metrics calculated from them are kept without the answer text. If you delete the project, we also remove the associated tracking data. The legal basis is Art. 6(1)(b) GDPR (performing the measurement you requested).

Contact Form and Google reCAPTCHA

When you write to us through the contact form, we process your details (name, email address, message) to answer your request. To protect against spam, we load Google reCAPTCHA on the contact page (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Your browser transmits, among other things, your IP address and information about browser and page view to Google. We do not store your IP address ourselves for this. We store name, email address and message until your request is resolved. The legal basis is Art. 6(1)(f) GDPR (protection against spam and abuse) and, for handling your request, Art. 6(1)(b) GDPR. Details: https://policies.google.com/privacy

Data Transmission in Contract Conclusion for Services

Personal data is only transmitted to third parties if there is a necessity within the framework of contract processing. Third parties can be, for example, payment service providers, hosting providers, or specialized service providers. No further transmission of data takes place, or only if you have expressly consented to it.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

PayPal

Our website enables payment via PayPal. The provider of the payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

When you pay with PayPal, the payment data you enter is transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the fulfillment of a contract). You can revoke your previously given consent at any time. Past data processing operations remain effective upon revocation.

Orders and Invoices

For an order we store plan, domain, invoice data and payment status. Payment is processed through PayPal (see above). On the shop page your browser loads the PayPal script from paypal.com for this; PayPal already receives your IP address at that point. For a new order we additionally send ourselves an internal WhatsApp notification containing name or company, email address, plan and domain. We keep invoices in accordance with the statutory retention periods (Art. 6(1)(c) GDPR).

Beta Program, Feedback and Forum

When you report errors or give feedback in the beta program, we store your user ID, your text and the page concerned. The same applies to ratings of individual content through the feedback box.

Forum posts are publicly visible and contain your username. Therefore do not post confidential information in the forum. An AI-assisted reply can be created for forum posts. Only the question you asked publicly is transmitted to OpenAI for this.

The legal basis is Art. 6(1)(a) GDPR (consent by submitting) or Art. 6(1)(f) GDPR (operating and improving the service).

External Resources and Content Delivery Networks

We load some parts of our pages from external servers. When they are retrieved, your browser technically transmits your IP address to the respective provider:

  • unpkg (unpkg.com): the interface of the API documentation, only on the API documentation page.
  • Gravatar (Automattic Inc., USA): if no profile picture is set, your user account shows a default image from Gravatar. A hash of your email address is transmitted in the process.

The legal basis is Art. 6(1)(f) GDPR (uniform, secure and fast delivery of our website).

Web Fonts

To ensure consistent and visually appealing typography, we use locally hosted web fonts on our website.

These fonts are served directly from our own server, and no connection is made to external services such as Google Fonts.

As a result, no personal data—such as your IP address—is transmitted to third parties or outside the EU.

This approach respects your privacy and fully complies with applicable data protection regulations.

YouTube (Enhanced Privacy Settings)

Our website does not embed videos from YouTube.

No automatic connection is established to YouTube or Google servers, and no personal data is transmitted to third parties.

We deliberately avoid external video content to protect your privacy and prevent data transfers to third countries.

Artificial Intelligence and Automated Decisions

We use AI-supported systems to evaluate SEO analyses, formulate recommendations and draft replies in the forum (see “SEO Analyses and Service Providers Involved”). We do not use AI to analyze your user behavior, to personalize content or to detect spam. The systems do not make automated decisions that have legal effects on you or similarly significantly affect you.

International Data Transfers

Some of our service providers (e.g. Google, OpenAI, PayPal, Gravatar) are based in third countries outside the EU or process data there. Data is only transferred to countries with an adequate level of data protection or on the basis of EU standard contractual clauses or other suitable safeguards pursuant to Art. 46 GDPR.

Retention Periods

We store personal data only as long as it is necessary for the respective purposes or as prescribed by legal retention periods. After expiration of retention periods, data is routinely deleted, unless it is required for contract fulfillment or contract initiation.

Data Protection in Applications

For application procedures, we process your data exclusively for the purpose of filling positions based on Art. 6 para. 1 lit. b GDPR or § 26 BDSG. Application documents are deleted after completion of the procedure, or in case of hiring, retained after termination of employment according to legal requirements.

Last updated: October 7, 2026