Privacy policy

Last updated: October 2026

1. Controller

The controller under the General Data Protection Regulation (GDPR) is Nikolas Eller, Aachener Str. 1370, 50859 Cologne, Germany, email: info@goodnightsec.com. A data protection officer is not required by law and has not been appointed.

2. Overview

This is a static website. It has no registration, no login, no forms and sets no cookies. Fonts, images and scripts are served from this domain. Personal data is processed only as far as technically necessary to deliver the site (section 3). There is no analytics.

3. Hosting and delivery (Cloudflare)

The site is delivered through Cloudflare Workers, provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. On every request Cloudflare processes technically necessary connection data: IP address, date and time, requested URL, referrer, browser identifier (user agent) and security attributes of the request.

The purpose is to deliver the site, protect it against attacks (for example DDoS) and analyse errors. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a fast, secure and stable website. The site cannot be displayed without this data.

Cloudflare acts as our processor under a data processing agreement pursuant to Art. 28 GDPR. Processing in the USA is possible. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, so transfers rely on the European Commission's adequacy decision (Art. 45 GDPR), supplemented by standard contractual clauses (Art. 46(2)(c) GDPR). We do not store server logs ourselves. Cloudflare deletes connection data once it is no longer needed for these purposes. Details: cloudflare.com/privacypolicy.

4. Storage in your browser

This site sets no cookies. It only stores the following entries in your browser's localStorage, which are never sent to us:

  • gns-site.theme: your choice of light or dark theme, only if you use the toggle in the header.

They are kept until you delete them in your browser settings. They are strictly necessary to provide the functions you use (§ 25(2) no. 2 TDDDG).

5. Contact

If you email us, we process your address and the content of your message to handle your request. The legal basis is Art. 6(1)(f) GDPR (our interest in answering enquiries), or Art. 6(1)(b) GDPR for enquiries about a contract. We delete the message once the matter is resolved, unless statutory retention obligations apply.

6. External links

Links to GitHub, product websites and other sites are only loaded when you click them. From then on, the privacy policy of the respective provider applies.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)). An email to info@goodnightsec.com is enough.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement.

You are under no statutory or contractual obligation to provide personal data. There is no automated decision-making, including profiling (Art. 22 GDPR).

Right to object under Art. 21 GDPR

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.