Privacy Policy – SilentShield.io

4.1 Provision and Security of Services

When using SilentShield.io, technical access data is processed in order to:

• Detect and prevent attacks (e.g., bots, spam, DDoS)
• Prevent misuse
• Ensure the stability and security of the systems

In particular, the following data is processed:

• IP address
• Browser and device information
• HTTP header data
• Time and content of requests
• Interaction and behavioral data

Automated analysis methods are used to detect attacks by evaluating access patterns. In this context, automated decisions may be made (e.g., blocking requests) insofar as this is necessary for system security.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in IT security and functionality)

4.2 Contractual Services

We process personal data for the initiation, execution, and fulfillment of contractual relationships.

• Master data (name, company, address)
• Contact data (email, phone number)
• Contract and billing data

Legal basis: Art. 6(1)(b) GDPR

4.3 Communication and Support

When you contact us (e.g., by email, ticket system, or phone), we process the transmitted data to handle the inquiry.

Legal basis: Art. 6(1)(b) GDPR (contract), Art. 6(1)(f) GDPR (efficient communication)

4.4 References and Corporate Presentation

The use of company names or logos is carried out exclusively on the basis of express consent or an individual contractual agreement.

4.5 Agent detection and reporting (Agent Gateway)

If the website operator enables the Agent Gateway, SilentShield detects automated AI agents and bots on the server side and provides the operator with a report about them. The operator may optionally define policies under which certain agents are limited or refused; enforcement takes place locally at the operator. Only pseudonymized data is processed:

• a daily-rotating, non-reversible hash of the accessing agent's IP address (the raw IP address is not stored),
• a daily-rotating, non-reversible hash of the User-Agent,
• the requested path without query parameters,
• this raw data is retained for at most 14 days, after which only anonymized aggregates remain.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security, abuse and cost control, and transparency about automated access).

4.6 Origin of your sign-up (advertising)

If you reach our website through one of our ads or campaigns, the address you opened contains up to six identifiers (utm_source, utm_medium, utm_campaign, utm_term, utm_content, utm_id). If you then register, we store these identifiers once with your account in order to evaluate which of our advertising measures lead to sign-ups.

The identifiers are passed on only in the address of the links and are not stored in your browser (no cookie, no local storage). No form contents, passwords, keys or email addresses are taken from the address; each value is limited to letters, digits and a few special characters and to 100 characters.

The identifiers are kept until your account is deleted. You can object to this processing at any time by writing to us at the address given above; we will then remove the identifiers from your account.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring the effectiveness of our advertising)

6.1 Internal Recipients

Access is granted exclusively to employees involved in operations, support, billing, or IT security.

6.2 External Service Providers

We use selected service providers, in particular:

• Hosting providers
• IT and security service providers
• Payment service providers

Where necessary, processing takes place within the framework of data processing agreements pursuant to Art. 28 GDPR.

6.3 Use of Cloudflare

We use the service Cloudflare (Cloudflare, Inc., USA) as a Content Delivery Network (CDN), reverse proxy, and security service (e.g., WAF, DDoS protection).

Data traffic is routed through Cloudflare's infrastructure. In particular, the following data may be processed.

• IP address
• HTTP header information
• Browser and device information
• Access data and log files

Purpose: Security, performance, and availability of our services. Legal basis: Art. 6(1)(f) GDPR

Cloudflare may transfer data to third countries (in particular the USA).

Cloudflare is certified under the EU-US Data Privacy Framework. In addition, standard contractual clauses pursuant to Art. 46 GDPR are used.

6.4 Use of Matomo (Web Analytics)

We use Matomo, a self-hosted open-source web analytics tool, to analyze the use of our website. Matomo is operated on our own servers (analytics.forge12.com) — no data is transferred to third parties.

• Pages visited and navigation paths
• Browser type and operating system
• Approximate location (anonymized IP address)
• Referrer URL

IP addresses are anonymized before storage (last two octets are removed). No cookies are set without your prior consent.

You can opt out of analytics tracking at any time via our cookie banner or in your browser settings.

Legal basis: Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time with effect for the future.