Privacy Policy

1. Controller

The controller responsible for processing on this website under the General Data Protection Regulation (GDPR) is:

Luvion Labs UG (haftungsbeschränkt)
Rheydter Straße 67
41352 Korschenbroich
Deutschland

Represented by: Leon Weinmann
Commercial register: Amtsgericht Neuss, HRB 25514
Email: info@byebot.de

2. Hosting and server logs

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Deutschland. Hetzner processes personal data on our behalf as a processor under Art. 28 GDPR under a data processing agreement. Processing takes place exclusively on servers in the European Union.

When you access the website, your browser automatically sends the following data to our web server. It is processed in logs for IT security, troubleshooting, and stable operation:

• IP address
• Date and time of access
• Requested URL and HTTP status code
• Referrer URL
• Browser and operating system (User-Agent)

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is securing and reliably operating the website and defending it against attacks.

3. Web analytics

This website uses an analytics service to understand website use. The platform runs at analytics.luvionlabs.de on infrastructure under our control. Data is not disclosed to third parties.

It collects:

• Page path and title
• Referring website, limited to its domain
• Screen dimensions
• Browser language and time zone
• Browser, operating system, and device type derived from the User-Agent
• Approximate country and city derived through an IP-based GeoIP lookup
• UTM parameters where present
• Outbound-link clicks
• Session duration measured through periodic pings

No cookies. Analytics uses neither cookies nor persistent browser storage for tracking. A daily-rotating hash of IP address and User-Agent distinguishes visitors for that day, preventing long-term recognition.

The IP address is used only for approximate location and the daily hash and is not stored in its original form.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is statistical analysis to improve the website. As no cookies or other information are stored on your device, consent under § 25 TDDDG is not required.

4. ByeBot CAPTCHA

This website embeds our own ByeBot CAPTCHA so visitors can try the widget. It does not protect a production form here. Loading an example retrieves the widget from challenge.byebot.de and transmits technical data used to assess whether a request comes from a person or a program.

Cookies: none. Tracking: no cross-site recognition and no advertising. Recipient: only the hosting provider in section 2 as processor; the Service runs on our infrastructure in Germany. Retention: detection events are deleted after 30 days. They contain no IP address, device fingerprint, key content, raw keyboard timings, or pointer coordinates. Backups are overwritten within six months. Legal basis: Art. 6(1)(f) GDPR, based on our legitimate interests in demonstrating our Service and defending against automated access.

5. Email contact

If you email info@byebot.de, we process the data you provide, normally your email address, optional name, and message, solely to handle the enquiry. The basis is Art. 6(1)(b) GDPR for pre-contractual or contractual enquiries and Art. 6(1)(f) GDPR otherwise, based on our legitimate interest in responding.

We delete the data after finally handling the enquiry unless statutory retention duties apply.

6. Customer account and billing

ByeBot customers open an account at dashboard.byebot.de. We process the email address; time-limited sign-in links; session data including browser characteristics and IP address used to bind a session to the signing-in device; website configuration; aggregate statistics; dashboard feedback; and invoice and payment data. The bases are Art. 6(1)(b) GDPR for the contract, Art. 6(1)(c) GDPR for commercial and tax invoice retention, and Art. 6(1)(f) GDPR for account security and abuse prevention.

Recipients: Stripe Payments Europe, Ltd., Dublin, Ireland processes payments. You enter payment details directly with Stripe and we receive no complete card details. Stripe acts partly as our processor and partly as an independent controller, including for fraud prevention; details are in Stripe’s privacy policy. An email provider with servers in the European Union sends sign-in links and notifications. Hosting is described in section 2.

Retention: Account data is deleted when you delete the account. Invoice data is retained for the statutory ten-year period under § 147 AO and § 257 HGB.

7. Local storage

This website uses no cookies. Your selected interface language is kept in your browser’s localStorage so it can be restored on a later visit. It never leaves your device or reaches our servers. Storage is based on § 25(2) no. 2 TDDDG because it is strictly necessary for functionality expressly requested by the user.

8. TLS encryption

This website uses TLS encryption to secure transmission of confidential content. An encrypted connection is indicated by the browser changing the address from http:// to https://.

9. Your rights as a data subject

The GDPR grants you the following rights concerning your personal data:

You can exercise these rights by contacting info@byebot.de.

You may also complain to a data-protection supervisory authority. Our competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.

10. Right to object

Where we process personal data on legitimate interests under Art. 6(1)(f) GDPR, you may object at any time for reasons arising from your particular situation. An informal email to info@byebot.de is sufficient.

11. Changes to this Privacy Policy

We may amend this policy to keep it aligned with current legal requirements or reflect changes to our services. The current version applies when you next visit.