Privacy

Cookie consent management

This website uses its own, self-developed cookie consent solution to obtain your consent to the storage of certain cookies on your device and to document this consent in compliance with data protection law. No data is transferred to third-party providers in the process.

When you visit our website, a cookie (“pxl_consent”) is stored in your browser which contains the following information:

• Your consent(s) or the withdrawal of your consent(s) per category (technically necessary, functional)
• Time of consent

This cookie is stored for 365 days. You can withdraw or adjust your consent at any time via the “Cookie Settings” link in the footer of this website.

The cookie consent management is used to obtain the legally required consents for the use of certain technologies. The legal basis for this is Art. 6(1)(c) GDPR.

Reach measurement with Umami

This website uses Umami, an open-source software for reach measurement. We operate Umami self-hosted on our own infrastructure at analytics.pixzl.de within the European Union. No data is transferred to third parties or to third countries.

Umami collects aggregated, non-personal usage data such as page views, length of stay, origin (referrer), the approximate region at country level and the browsers and operating systems used. We also record basic interactions such as clicks on outgoing links. No cookies are set and no information is stored on or read from your device; there is no cross-device tracking and no recognition beyond individual days.

Your IP address is processed exclusively for a short time and on the server side to detect unique visits and is not stored permanently. It is not possible to identify individual persons.

Since there is no access to your device within the meaning of § 25(1) TDDDG, no consent is required for this. The legal basis is our legitimate interest in a data-minimising statistical evaluation of website usage pursuant to Art. 6(1)(f) GDPR. You can object to this processing at any time by activating the “Do Not Track” setting in your browser - our tracking respects this setting and then does not take place at all.

Cloudflare Turnstile

We use “Cloudflare Turnstile” (hereinafter “Turnstile”) on this website. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (hereinafter “Cloudflare”).

Turnstile is intended to check whether data entered on this website (e.g. in a contact form or the audit tools) is entered by a human or by an automated program. For this purpose, Turnstile evaluates various characteristics of the browser environment as soon as you submit a protected form - such as the IP address, metadata provided by the browser and the result of a JavaScript challenge executed in the background. The information collected is forwarded to Cloudflare and processed there for assessment.

According to the provider, Turnstile does not set any cookies and does not carry out any personal behavioural analysis. The challenge runs in the background; a visible widget only appears if the automated check is not conclusive.

The data is stored and analysed on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and from SPAM.

Cloudflare has its registered office in the USA, which is why personal data may be transferred to a third country. The data transfer is carried out on the basis of the standard contractual clauses adopted by the EU Commission (Art. 46(2)(c) GDPR) and supplementary safeguards in accordance with Cloudflare's data processing agreement. Details: https://www.cloudflare.com/cloudflare-customer-scc/.

For further information on Cloudflare Turnstile, please refer to Cloudflare's privacy policy and the Turnstile product documentation: https://www.cloudflare.com/de-de/privacypolicy/ and https://developers.cloudflare.com/turnstile/.

Online appointment booking

On our contact page and via a button that can be displayed, we offer you the option of booking an appointment for a non-binding initial consultation or a callback directly online. We operate the booking calendar ourselves using the open-source software Cal.com at booking.pixzl.de on our servers in Germany. No data is transferred to the manufacturer of the software or to other third parties.

The booking calendar is loaded only after your active interaction (click on the “Select appointment” or “Book callback” button).

As soon as you book an appointment, we process the data you enter in order to organise the appointment: name, email address, phone number, selected time, time zone and, optionally, a message or details of the occasion. In addition, there is technical connection data (including IP address, browser and device information) that arises when the calendar is accessed. The booking is then synchronised with our calendar so that we can keep the appointment.

The legal basis for processing in the context of a specific appointment booking is Art. 6(1)(b) GDPR (implementation of pre-contractual measures at your request). The data is stored only for as long as is necessary to carry out the appointment and to fulfil statutory retention obligations.

Sentry (error and stability monitoring)

We use the “Sentry” service on this website for the automated detection and correction of technical errors. The provider is Functional Software, Inc. (dba Sentry), 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA.

If a technical error occurs in your browser or on our server when the website is accessed, Sentry automatically transmits information about this error. In particular, the error message including the technical call path (stack trace), the page accessed (URL), the type and version of your browser, your operating system and the time of the error are processed. This data helps us to reliably detect and fix crashes and malfunctions of the website.

We have configured Sentry in a data-minimising way: no personal data such as IP addresses or cookie contents is automatically collected (option “sendDefaultPii” deactivated). Sentry does not set any cookies for error recording and does not access information in your device. User sessions are not recorded (“Session Replay”).

The error data is processed in the European Union (Sentry EU data region). As the provider has its registered office in the USA, access from the USA nevertheless cannot be completely ruled out; we base this possible transfer on the standard contractual clauses of the EU Commission under Art. 46(2)(c) GDPR.

Sentry is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free, stable and secure operation of our website. A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with the provider.

Further information on data protection at Sentry can be found at: https://sentry.io/privacy/.

At /tools we provide free tools (including Meta Tag Checker, Open Graph Preview, Domain Check, Ladezeit Checker, HTTP Header Checker, Schema Markup Tester, robots.txt Validator, Hreflang Checker, Sitemap Generator, SEO-Audit, Accessibility-Audit, DSGVO-Audit, GEO-Audit, Farbkontrast Checker, Passwort Generator, JSON Formatter, Lorem Ipsum Generator, Zeichenzähler, Farbpaletten Generator, QR-Code Generator, robots.txt Generator, Google Snippet Checker and various OBS overlays). With regard to data processing, these tools can be divided into three groups:

a) Tools that run exclusively in your browser

For the following tools, no data whatsoever is transferred to our server. Your entries remain entirely on your device and are not sent either to us or to third parties: Passwort Generator, JSON Formatter, Lorem Ipsum Generator, Zeichenzähler, Farbpaletten Generator, Farbkontrast Checker, QR-Code Generator, robots.txt Generator, Google Snippet Checker and all OBS overlays (Countdown, Social Bar, Now Playing display). Processing takes place purely on the client side in the JavaScript of your browser.

b) Tools that send a request to our server

For the tools Meta Tag Checker, Open Graph Preview, Ladezeit Checker, Domain Check, HTTP Header Checker, Schema Markup Tester, robots.txt Validator, Hreflang Checker, Sitemap Generator and SEO-Audit, we process the following data on our server as soon as you actively use the tool and start the check:

• the URL or domain you enter (input data)
• your IP address for abuse prevention and rate limiting (volatile, for a maximum of 15 minutes in memory, no permanent storage)
• technical access data as part of the usual server logs (time of the request, path accessed, user agent, HTTP status)

For the tools mentioned, our server retrieves the target URL you specify once on your behalf and reads publicly accessible content and HTTP headers (e.g. title, meta tags, Open Graph tags, security headers, JSON-LD structured data, hreflang tags). In the process, the target website sees only the IP address of our server - your IP address is not transmitted to the target website. The retrieved data is displayed to you and is not stored afterwards.

For the Domain Check, we carry out standard DNS queries (A, AAAA, MX, TXT, NS, CNAME records and DMARC TXT) via our server's DNS resolver and check the HTTPS availability and the TLS certificate of the domain. The queries are made exclusively against publicly available infrastructure. The results are displayed to you and are not stored.

The Sitemap Generator additionally follows same-origin hyperlinks of the target website with hard limits (maximum 100 URLs, maximum three levels deep, maximum 25 seconds runtime). The URLs found in this way are used exclusively to generate the sitemap XML and are not persisted.

c) Tools with optional email delivery (SEO-Audit, Accessibility-Audit, DSGVO-Audit, GEO-Audit)

The tools /seo-audit, /accessibility-audit, /dsgvo-audit and /geo-audit combine several checks into one overall report:

• SEO-Audit: performance, SEO meta tags, security headers, structured data, hreflang
• Accessibility-Audit: automatable WCAG 2.2 AA criteria (language, headings, alt texts, form labels, link/button quality, iframe titles, tabindex)
• DSGVO-Audit: mandatory information (legal notice, privacy policy), HTTPS/HSTS, cookies set on first access, known trackers in the HTML, hotlinked Google Fonts, YouTube/Maps embeds and server location via an IP geolocation query against ipapi.co
• GEO-Audit: visibility for AI search engines - AI bot access (analysis of /robots.txt of the target domain for Disallow rules for GPTBot, PerplexityBot, ClaudeBot, etc.), presence of /llms.txt, schema markup for AI extraction, content heuristics (question headings, answer block lengths, statistics/source density), OpenGraph tags. Only publicly accessible content of the target website is retrieved - no third-party provider is contacted for this audit.

The initial check is carried out anonymously as described under b). Optionally, you can have the detailed report sent to you by email. In this case, we additionally process:

• the email address you provide
• the checked URL and the audit result (for inclusion in the report email)

Processor for sending emails: Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin). Servers in Germany and France. A data processing agreement pursuant to Art. 28 GDPR is in place with Brevo.

Additional third-party provider for the DSGVO-Audit (server location query): ipapi (ipapi.co, operated by Kloudend, Inc., 188 King St, Toronto, ON M5V 1J2, Canada). Only the IPv4 address of the target website you specify is transmitted (not your IP). Canada has a GDPR adequacy decision of the EU Commission (PIPEDA); from your perspective no third-country transfer takes place, as only data of third parties (the target domain) is processed.

Storage period: If you only request the report and do not tick the box for marketing consent, your email address is transmitted to Brevo exclusively once for delivery of the report and is then not stored in a list or database. Processing is limited to the transactional delivery of the report email.

If you tick the box for marketing consent, your email address is additionally added to our lead list and to our newsletter list at Brevo so that we can occasionally send you insights and offers. This storage is based on your consent (Art. 6(1)(a) GDPR) and can be withdrawn at any time via the unsubscribe link in every email or by an informal message to us.

Legal basis for the one-time delivery of the report: Art. 6(1)(b) GDPR (fulfilment of your request). Legal basis for inclusion in our lists where consent has been activated: Art. 6(1)(a) GDPR.

No registration, no cookies, no trackers

All tools can be used anonymously. No registration or login is required. In connection with the tools, we set no cookies, use no tracking and do not store your entries or results beyond the mere processing of the request.

Legal basis and purpose

The legal basis for the processing described is Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in providing free helper tools that require no login for developers, designers and entrepreneurs and - for the IP-based evaluation in the rate limiter - in protecting our infrastructure from abusive automated use. Data processed on the server side is not stored further after the request has ended; access logs are deleted in accordance with the section “Hosting” after the usual retention periods have expired.

We offer native applications for macOS and iOS (including Deploir). These apps are distributed free of charge exclusively via the Apple App Store.

a) No telemetry, no licence check

The current App Store versions of our apps do not perform a licence check. No usage statistics, no crash reporting to third parties and no analytics data are collected. Insofar as an app - such as Deploir - establishes connections to servers, this is done exclusively to the destinations you have stored in the app yourself (e.g. your own Coolify instance). Pixzl receives no data whatsoever in this process.

b) Push notifications via Firebase Cloud Messaging (Pixzl app)

The Pixzl app for iOS optionally offers push notifications about new Newsroom posts. If you activate these notifications in iOS for the Pixzl app, the app subscribes to the topic “newsroom” with the Firebase Cloud Messaging service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). We use the topic model exclusively - this means:

• We do not address individual devices; we send a push to all topic subscribers at the same time.
• We do not know your Apple Push Notification Service device identifier (“device token”); it remains with Apple and Google.
• The push content triggered by us contains only public information about the new post (title, slug, category, public image URL) - no personal data.

The recipient is Google in its function as push provider. We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR (standard contractual clauses of the EU Commission). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest consists in informing app users promptly about new content relevant to them. You can deactivate the notifications at any time in the iOS settings of the Pixzl app - this also ends the topic subscription.

Details of data processing by Google: https://policies.google.com/privacy. Details of the Apple Push Notification Service: https://www.apple.com/legal/privacy/de-ww/.

c) Obtaining the app via the Apple App Store

Apple handles the acquisition, installation and any updates of the app on its own responsibility. Which data Apple processes in this context (e.g. Apple ID, device information, download history) is set out in Apple's privacy policy. The provider is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Details: https://www.apple.com/legal/privacy/de-ww/.

d) Information on in-app purchases

Should future app versions offer paid features via in-app purchases, Apple handles these payments exclusively itself. In this case, Pixzl does not receive any payment data, but only a purchase confirmation signed by Apple to unlock the feature.

e) Your rights

Since no personal data accrues at Pixzl in connection with the use of the apps, no requests for information or erasure addressed to us are required in this regard. For data that Apple processes in connection with obtaining the app from the App Store, please contact Apple directly. If you have any questions, you can reach us at any time: office@pixzl.de.