Privacy policy

The controller within the meaning of the GDPR is the provider named in the imprint: not a usual business GmbH, Stresemannstraße 23, 10963 Berlin, Email: kontakt@not-a-usual-business.de.

Data minimisation is one of our review principles – and applies to us too. We use no trackers, no analytics and no advertising cookies. Fonts are hosted locally; no external font services are loaded.

In your browser we only store your language choice (DE/EN) in local storage. This is technically necessary (§ 25 (2) TDDDG), which is why there is no cookie banner.

The website is operated by [BITTE ERGÄNZEN] (hosting provider). When you visit, the server processes technically necessary data (IP address, time, page, browser type) to deliver the page and protect against abuse. Legal basis is Art. 6 (1)(f) GDPR. Server logs are deleted after [BITTE ERGÄNZEN] days.

We store requests, quick check results and seals in a database operated by Supabase Inc. in an EU data centre. A data processing agreement under Art. 28 GDPR is in place. Access is restricted by access rules (Row Level Security) on every table.

When we reply by email we use [BITTE ERGÄNZEN] (email provider). Your email address and the message content are processed. Legal basis is Art. 6 (1)(b) GDPR.

For the quick check we passively fetch the address you enter – like a normal visitor. We store the domain and the result (grade, number of findings per area). We do not store the content of the checked site.

To prevent abuse we limit checks per IP address. We store your IP only as an irreversible hash, deleted after 24 hours at the latest.

Legal basis is Art. 6 (1)(f) GDPR (providing the check, abuse protection). Quick check results are deleted after [BITTE ERGÄNZEN] months.

When you request a review or demo we process your name, email, chosen tier and – if provided – company, team size, project URL, repo link, tool used and your message, in order to handle your request and prepare an offer.

Legal basis is Art. 6 (1)(b) GDPR (pre-contractual measures). If no contract follows, we delete the data after 6 months. If you place an order, statutory retention periods apply (up to 10 years for invoices).

To prevent spam we use an invisible form field and a per-IP limit (stored only as a hash, deleted after 24 hours).

Code is processed only for the review and deleted afterwards, no AI training. We process your code in the EU and do not share it with third parties.

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Just write to us at the address above.

You also have the right to lodge a complaint with a data protection supervisory authority.