Privacy

Last updated: June 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Curbolt
Email: info@curbolt.net
Website: https://www.curbolt.de, https://www.curbolt.net

2. General information

Protecting your personal data is important to us. Personal data means any information relating to an identifiable person. This privacy policy explains what data we collect, why we use it, and what rights you have.

Unless stated otherwise below, processing is based on the GDPR.

3. Your rights as a data subject

You may contact us at any time using the details above to exercise the following rights:

  • Access to your stored data (Art. 15 GDPR),
  • Rectification of inaccurate data (Art. 16 GDPR),
  • Erasure of your data (Art. 17 GDPR),
  • Restriction of processing (Art. 18 GDPR),
  • Data portability (Art. 20 GDPR), where processing is based on consent or contract,
  • Objection to processing (Art. 21 GDPR) where processing is based on legitimate interests.

You may withdraw consent at any time with effect for the future.

You also have the right to lodge a complaint with a supervisory authority. An overview of authorities in Germany is available at bfdi.bund.de.

4. Visiting our website and server log files

Type and purpose of processing

When you visit our website, our hosting provider automatically records technical access data in server log files, for example:

  • IP address (possibly truncated/anonymized),
  • date and time of the request,
  • page/URL accessed,
  • browser type and version,
  • operating system used,
  • referrer URL,
  • hostname of the accessing device.

This data is used to provide the website, maintain security, troubleshoot errors, and optimize technical performance.

Legal basis

Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation of the website).

Retention

Log data is kept only as long as necessary for these purposes, typically up to 14 days, after which it is deleted or anonymized.

5. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognize a secure connection by “https://” in your browser’s address bar and the lock icon.

6. Cookies and session data

We use technically necessary session cookies to provide login status, language settings, and security features (e.g. CSRF protection). These cookies are required for the website to function.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest) and Art. 6(1)(b) GDPR where the session is required to perform our services (use of your account).

Session data is removed after logout or when the session ends, unless statutory retention obligations apply.

7. Registration and user accounts

You may create a user account on our website. We process in particular:

  • username,
  • email address,
  • password (stored only as a cryptographic hash, never in plain text),
  • registration date, last login, login count,
  • optional profile and activity data (e.g. level, XP, comment count),
  • language preference.

Purposes: providing the account, authentication, email activation, abuse prevention, and communication related to use of the service.

Legal basis: Art. 6(1)(b) GDPR (contract/user relationship).

Account data is stored until you request deletion or the account is removed, unless legal obligations require longer retention.

8. Comments

Registered and logged-in users may post comments on certain articles. We store the comment text, timestamp, related article, user ID, and optionally rating data (karma).

Legal basis: Art. 6(1)(b) GDPR (use of community features) and Art. 6(1)(f) GDPR (moderation and abuse prevention).

Comments remain published until deleted by us or upon your request, unless legitimate interests (e.g. evidence preservation) require otherwise.

9. Email communication

We use your email address to send activation links during registration and, where applicable, password reset information.

Legal basis: Art. 6(1)(b) GDPR.

Emails are sent via configured SMTP services and only for the purposes stated above.

10. Google Analytics (optional)

If enabled in the site settings, we use Google Analytics (Google Ireland Limited / Google LLC). Usage data (e.g. pages visited, time on site, approximate location derived from IP) may be processed via cookies or similar technologies. IP anonymization is enabled (anonymize_ip).

Legal basis: Art. 6(1)(a) GDPR (consent via cookie/tracking settings where required) or Art. 6(1)(f) GDPR where consent is not legally required.

More information: Google Privacy Policy.

11. Google AdSense (optional)

When analytics/tracking features are enabled, Google AdSense may also be integrated. Cookies may be set and usage data transmitted to Google to deliver ads and generate statistics.

Legal basis: Art. 6(1)(a) GDPR (consent) where required.

Opt-out and settings: Google Ad Settings.

12. Hosting

Our website is hosted by an external provider that processes access data and content on our behalf to operate the site (Art. 28 GDPR, data processing agreement).

13. Right to object under Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data based on Art. 6(1)(f) GDPR.

After an objection, we will no longer process the relevant data unless we demonstrate compelling legitimate grounds that override your interests, or processing is necessary for the establishment, exercise, or defense of legal claims.

Please send objections to: info@curbolt.net

14. Changes to this privacy policy

We may update this privacy policy when legal requirements, website features, or services change. The version published on this page applies.

15. Privacy contact

If you have questions about personal data processing or wish to exercise your rights, please contact:

Email: info@curbolt.net