Privacy policy

Last updated: 3 November 2026. This site is deliberately built to be sparing with data: no cookies, no third-party analytics services, no embedded third-party services. Simple visitor statistics are generated solely from the server log data with truncated IP addresses (section 3). What is processed is set out here in full.

1. Controller

LimeByte GmbH, Im Mediapark 5, 50670 Cologne, Managing Director Martin Stroschein, email info@limebyte.de, phone +49 221 16834135.

2. Accessing the site (server log data)

When the site is accessed, our web server processes the following as a technical necessity: IP address, date and time, file requested, HTTP status, volume of data transferred, browser and operating system identifier, previously visited page (referrer). The legal basis is Art. 6(1)(f) GDPR (secure operation, troubleshooting). Log data is deleted after 15 days at the latest. The site is operated on a server of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany (Falkenstein data center) (hosting as processing on behalf of the controller under Art. 28 GDPR).

3. No cookies, visitor statistics without tracking

This site sets no cookies and uses no third-party analytics or advertising services. From the server log data (section 2), we compile simple visitor statistics on our own server: page views, approximate visitor numbers, pages accessed, referring pages, browser and device types. Before the analysis, the IP address is truncated (for IPv4 the last octet is dropped, for IPv6 everything after the network segment), so that it can no longer be related to a person. No script is loaded, no tracking pixel is embedded and no usage profile is created. The legal basis is Art. 6(1)(f) GDPR (interest in knowing the use of the site in rough figures). The truncated data is retained as statistics; the untruncated log data is subject to the period stated in section 2. The cost calculator runs exclusively in your browser; inputs are not transmitted and not stored. No fonts, scripts or images are loaded from third-party servers, with one exception, which is described in section 5.

4. Contact form

When you use the form, we process your request type (for example free trial, quote or question), name, company, email address, number of your servers (optional) and your message in order to answer your inquiry and, if you request it, to set up the free trial. Stating the company is required because the offering is directed exclusively at businesses. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request) or, as the case may be, point (f) (answering general inquiries). We do not use your details for advertising without your separate consent. The message is delivered to us as an email; it is sent via an email service provider (Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, formerly Sendinblue GmbH) as a processor under Art. 28 GDPR. Our mailbox is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Workspace) as a processor under Art. 28 GDPR; any transfer to the USA is based on the EU Commission’s adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR), under which Google LLC is certified. We store inquiries for as long as is necessary to process them, at most 12 months after completion, unless statutory retention obligations prevent this. To protect against abusive submissions, the number of submissions per address is limited over time.

5. Spam protection with Cloudflare Turnstile

As soon as you click a field of the contact form or navigate to it by keyboard, a check by Cloudflare Turnstile is loaded (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; EU representative: Cloudflare Portugal, Unipessoal Lda., Lisbon). Turnstile checks, without puzzles, whether the submission comes from a human, and for this purpose processes technical characteristics of your browser and your IP address. The legal basis is Art. 6(1)(f) GDPR (protecting the form against abuse); access to your terminal equipment is strictly necessary for this (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). In doing so, Cloudflare acts as a processor under Art. 28 GDPR. The transfer to the USA is based on the EU Commission’s adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR); Cloudflare is certified under it. As long as you do not touch the form, no connection to Cloudflare is established. If you do not want this, write to us directly by email.

6. Your rights

You have the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on Art. 6(1)(f) (Art. 21). To exercise these rights, contact the address given above. You also have the right to lodge a complaint with a supervisory authority; the authority competent for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia).

7. Scope and the Sentinel application

This privacy policy applies to the product site sentinel-shield.de (also reachable at www.sentinel-shield.de). Requests to the previous address sentinel.limebyte.de are redirected to sentinel-shield.de; in the process, only the server log data described in section 2 is generated. The application itself (app.sentinel.limebyte.de) has its own sign-in credentials and its own privacy notice, which you will find after signing in; it processes only the data of the servers that you yourself enter there.