Privacy Policy

Last updated: 21.08.2026
Applicable Law: Republic of Austria

We take the protection of your personal data very seriously and therefore would like to transparently explain what data we collect from you and how we process it.

The controller within the meaning of the General Data Protection Regulation (GDPR) is: Florian Eibisberger

Collection and processing of data
We collect and process personal data when you voluntarily provide it to us in the context of using our website our our toolset. This may occur, for example, as part of a registration on our website, where you provide us with your name, email address, and a password.
Purpose and legal basis of data processing
We use the data you provide us solely for the purpose of providing you with the desired service. This may include the transmission of information about our products or the execution of orders.
Disclosure of data to third parties
We generally do not disclose your personal data to third parties. An exception to this applies only if it is necessary for the processing of orders or the provision of other services.
Data security
We use technical and organizational measures to protect your personal data against accidental or unlawful deletion, alteration, loss, and unauthorized disclosure or access.
Information, correction, deletion of your data
You have the right to request information about the personal data we store about you at any time. In addition, you have the right to request the correction, blocking or deletion of your personal data, provided that this does not conflict with any legal retention obligations.
The legal basis for the processing of your personal data is Article 6.1.b GDPR.

Thirdparty Tools used on Coding-Freaks

Cloudflare Turnstile
We use Cloudflare Turnstile (hereinafter "Turnstile") on this website. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter "Cloudflare"). Turnstile is used to check whether the data input on this website (e.g., in a our Register/Login or Contact forms) is made by a human or by an automated program. Turnstile analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters a website with Turnstile enabled. For the analysis, Turnstile evaluates various information (e.g., IP address, the duration of the website visit, or mouse movements made by the user). The data collected during the analysis is forwarded to Cloudflare. The storage and analysis of the data are based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g., device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time. Data processing is based on standard contractual clauses, which can be found here: https://www.cloudflare.com/cloudflare-customer-scc/. For more information on Cloudflare Turnstile, please refer to the privacy policy at https://www.cloudflare.com/cloudflare-customer-dpa/.

Webanalyse with Google Analytics
We use the web analytics software Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics 4 uses "cookies", which are text files stored on your device that allow us to analyze your use of the website. According to Google, individual IP addresses are not logged or stored in Google Analytics 4. No precise location data is provided in Analytics. Instead, the following metadata is derived from IP addresses: "city" (and the derived latitude and longitude of the city), "continent", "country", "region", "subcontinent" (and the ID-based equivalents). For accesses originating from the EU, IP addresses are only used to derive location data and are then immediately deleted. They are not logged, are not accessible, and are not used for other purposes. When collecting measurement data in Analytics, all IP lookups are performed on EU-based servers before the traffic is forwarded to Analytics servers for processing. These servers are also located outside the EU. Google Analytics includes the User-ID feature. This feature allows sessions to be assigned to a permanent ID, enabling cross-device analysis of user behavior. No unauthorized personally identifiable information is used with the IDs, and User-IDs do not contain information that could allow third parties to determine a user's identity. Based on the User-IDs, remarketing audiences can be created. In Analytics, only the User-ID and the device ID for the last device associated with a logged-in user are collected. We use the Google Signals feature. This feature collects additional information about website visitors who have enabled personalized ads, and ads can be delivered to these visitors in cross-device remarketing campaigns. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator.

Webanalyse with Microsoft Clarity
We use the web analytics software Microsoft Clarity for our website. The service provider is the American company Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft processes data from you, among other things, in the USA. Clarity or Microsoft is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en. In addition, Microsoft uses so-called Standard Contractual Clauses (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data also complies with European data protection standards when transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Microsoft commits to complying with the European data protection level when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding Standard Contractual Clauses, among other things, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en More information about the Standard Contractual Clauses at Microsoft can be found at https://learn.microsoft.com/en-us/compliance/regulatory/offering-eu-model-clauses More about the data processed by Microsoft through the use of Clarity can be found in the privacy policy at https://privacy.microsoft.com/en-us/privacystatement.

Web Analytics with Ahrefs Web Analytics

We use the web analytics software Ahrefs Web Analytics for our website. The service provider is Ahrefs Pte. Ltd., 16 Raffles Quay, #33-03 Hong Leong Building, Singapore 048581. Ahrefs processes data from you, among other things, in Singapore. Ahrefs Web Analytics is a particularly privacy-friendly analytics tool. The service does not use cookies or persistent identifiers and therefore does not store any information on your device. When you access our website, your IP address is processed together with information about your browser (user agent). This data is processed using a secure hash function with a random salt that is regenerated every 24 hours. The raw IP addresses are never stored in the database or logs, which prevents tracking of individual users beyond a single day. AhrefsAhrefs The data collected includes page views, referrers, information about operating systems, devices and browsers, language-related data (Accept-Language header), as well as common interactions such as link clicks and form submissions. Content from forms or input fields is not collected – only the fact that a form was submitted is logged. The visitor's location is identified using their IP address, but nothing more granular than city level. Ahrefs + 2

As Ahrefs is based in Singapore and therefore outside the EU, your data is transferred to a third country. This transfer is based on the Standard Contractual Clauses provided by the EU Commission (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even when transferred to third countries (such as Singapore). These clauses are based on an implementing decision of the EU Commission, which you can find here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en

The legal basis for processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR. We have concluded a Data Processing Agreement (DPA) with Ahrefs. You can find more about the data processed through the use of Ahrefs Web Analytics in the privacy policy at https://ahrefs.com/legal/privacy-policy and in the Data Processing Addendum at https://ahrefs.com/legal/data-processing-addendum

Mail-Provider and newsletter management with Mailjet
This website uses Mailjet for sending newsletters and E-Mails. The provider is Mailjet SAS (Global HQ) Office and postal address Paris: 4 rue Jules Lefebvre, 75009 Paris, France. Mailjet is a service that allows, among other things, the organization and analysis of E-Mail distribution. The data you enter for the purpose of newsletter subscription is stored on Mailjet's servers. If you do not want analysis by Mailjet, you must unsubscribe from the newsletters and delete the Account on our website. For the unsubscribe purpose, we provide a corresponding link in each newsletter message. Account Deletion is possible via the settings in your user account on our website or on Request via E-Mail. Additionally, you can also unsubscribe directly on the websites Backend. With the help of Mailjet, we are able to analyze our newsletter campaigns. For example, we can see if a newsletter message has been opened and which links have been clicked. This way we can determine, among other things, which links are clicked particularly often. We can also recognize whether certain predefined actions were performed after opening/clicking (conversion rate). For example, we can see if you made a purchase after clicking on the newsletter. Detailed information about Mailjet's functions can be found at the following link: https://www.mailjet.com/features/. Mailjet's privacy policy can be found at: https://www.mailjet.com/security-privacy/. The processing of the entered data is based on the user's consent (Art. 6 para. 1 lit. a GDPR). IP address (shortened/anonymized), other device-related data and E-Mail address, name, and other data you provide us with. Recipients of your personal data are maintainers of Coding Freaks as well as Mailjet as a data processor.

For contact regarding this matter, please use the contact details found on our Website. The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this result in functional limitations on the website and we need to delete your account if your want to prevent the storage of your E-Mail on Mailjet.
Processing outside the European Union (EU) or the European Economic Area (EEA) cannot be excluded, see: https://www.mailjet.com/security-privacy/. You can revoke your E-Mail Newsletter consent to the storage of your personal data at any time with future effect in the Coding-Freaks Backend. (Profile Page)

Google Search Console (optional connection in your account)
If you connect a project in our backend with your Google account, we retrieve data from your Google Search Console on your behalf. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The connection is voluntary and is not required to use the SEO tools; without it the corresponding columns simply remain empty. We request read-only access with the single scope www.googleapis.com/auth/webmasters.readonly and never write anything back to your Search Console.

We store on our servers, in encrypted form, the token issued by Google, together with the email address of the connected Google account and the property you selected. We also store the data we retrieve with it: per address of your website the clicks, impressions, click-through rate and average position of the last 28 days; the search queries for which your website appeared in Google, each with its wording, clicks, impressions, click-through rate and average position, both per address of your website and for the property as a whole; and for a prioritised selection of addresses the indexing status from the URL Inspection service, including the canonical address chosen by Google, the pages Google names as linking there, the sitemaps it was found in, and the time of the last crawl. We use this data exclusively to display it to you inside your own project, to send it to you as described below, and to derive findings from it. We do not use it for advertising, for profiling or for any purpose outside this tool. We do not pass it on to third parties; the only exception is our email service provider named above, which transmits the summary to you on our behalf as a data processor and may not use it for its own purposes.

The search queries are terms that visitors entered into Google, not data about you. Google reports them to us in aggregated form only and withholds rare queries for privacy reasons, so they identify no individual person, and we make no attempt to relate them to one.

Where you have enabled automated audits for a project, we send these figures to the email address of your account in a periodic summary. The summary goes to you and to no one else. You can switch it off at any time in the backend under SEO Audits.

The retrieved figures are replaced with every daily synchronization. The one exception is the trend: for each search query we keep one summary per calendar week, so that you can see how a query develops over time, and these summaries are deleted automatically after two years. You can disconnect at any time in the backend under SEO Audits; we then revoke the token at Google and delete it together with all figures and all query history retrieved for it. Independently of this, you can withdraw the access in your Google account under "Third-party apps & services". The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR, which you give by connecting, and Art. 6 para. 1 lit. b GDPR for the provision of the service you requested. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy

We reserve the right to change this privacy policy at any time.
The current version can always be found on our website.