Last updated: 29 May 2026
1. Controller
The controller responsible for processing personal data on this website is:
Deimann Com GmbH
Randstraße 75, 22525 Hamburg, Germany
Email: info@seniorgrade.io
We have not appointed a data protection officer, as we are not legally required to do so. For any privacy matter, please contact us at the address above.
2. Overview
We keep data collection to a minimum. By default this website sets no tracking or advertising cookies; analytics and ad-measurement tools load only after you consent (see section 5). It loads its fonts from our own servers (not from third-party font networks) and processes only the data necessary to deliver the site and the audit you request.
3. Hosting
This website is hosted on Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94103, USA. When you visit the site, Cloudflare automatically processes technical connection data in server log files — in particular your IP address, the date and time of the request, the page requested, the referrer URL, and your browser/operating system (user agent). This is necessary to deliver the website securely and reliably and to defend against attacks.
Legal basis: Art. 6 (1)(f) GDPR (our legitimate interest in the secure and efficient provision of our website). A data processing agreement (Art. 28 GDPR) is in place with Cloudflare, and transfers to the USA are safeguarded by the EU Standard Contractual Clauses.
4. Fonts
We self-host all fonts used on this website. No fonts are loaded from Google Fonts or any other third-party font network, so no personal data (such as your IP address) is transmitted to font providers when the page loads.
5. Cookies, analytics and advertising
By default this website sets no analytics or advertising cookies. We use Google Consent Mode: all advertising and analytics storage is set to “denied” until you give your explicit consent through our cookie banner, so no such cookies are placed unless you accept. You can withdraw your consent at any time with effect for the future via the “Cookie settings” link in the footer.
If you consent, we load Google Tag Manager, which in turn loads Google Ads conversion tracking — services of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). They set cookies that let us measure whether a visit originating from one of our online ads led to a purchase, so we can assess the effectiveness of our advertising. This can involve transferring data (including your IP address and online identifiers) to Google LLC in the USA; such transfers are safeguarded by the EU Standard Contractual Clauses, and Google is certified under the EU–US Data Privacy Framework. For the same purpose in relation to our ads on Reddit, we also load the Reddit Pixel (Reddit, Inc., San Francisco, USA); this likewise involves a transfer to the USA, safeguarded by the EU Standard Contractual Clauses. We also use Microsoft Clarity (Microsoft Corporation, USA) for session analytics and heatmaps — to understand how the site is used and improve it; it may record interactions such as clicks and scrolling (sensitive input is masked by default), which can likewise involve a transfer to the USA under the EU Standard Contractual Clauses.
Legal basis: your consent (Art. 6 (1)(a) GDPR and § 25 (1) TDDDG). Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
6. The audit service
If you purchase a production-readiness audit, you provide us with read-only access to your code repository and a short description of your application. We process this information solely to carry out the review you have commissioned. Your code is read for the review only, is never executed on our systems, is not shared with third parties, and is deleted from our side once the audit has been delivered.
Legal basis: Art. 6 (1)(b) GDPR (performance of a contract).
7. Payments
When you purchase an audit, the payment is processed by our payment provider, Stripe Payments Europe, Ltd. (Ireland). We do not receive or store your full payment card details; these are handled directly by the payment provider under its own privacy terms. We receive only the information needed to confirm and account for your purchase.
Legal basis: Art. 6 (1)(b) GDPR (performance of a contract).
8. Contacting us
If you contact us by email or through the forms on this site (the contact form and the post-audit feedback form), we process the data you provide (such as your name, email address and the content of your message) to handle your request. Form submissions are stored in our internal, self-hosted request-management system; they are not shared with third parties. Legal basis: Art. 6 (1)(f) GDPR, or Art. 6 (1)(b) GDPR where your request relates to a contract.
If you give us permission to publish your feedback as a review (an optional checkbox on the feedback form), the legal basis for publishing your name, role, country and review text is your consent, Art. 6 (1)(a) GDPR. You can revoke it any time at info@seniorgrade.io — we then remove the review.
9. Your rights
Under the GDPR you have the right to:
- access your personal data (Art. 15);
- rectification of inaccurate data (Art. 16);
- erasure (Art. 17);
- restriction of processing (Art. 18);
- data portability (Art. 20);
- object to processing (Art. 21); and
- withdraw any consent you have given, at any time, with future effect.
To exercise these rights, contact us at info@seniorgrade.io. You also have the right to lodge a complaint with a supervisory authority — for us, the Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit).
10. Changes to this policy
We may update this privacy policy to reflect changes to our service or to legal requirements. The current version is always available on this page.