Privacy Policy

This privacy policy is provided in English for your convenience. The German version is the legally binding document under GDPR/DSGVO.

1. Responsible Entity

Responsible for data processing on this website:
StefanAI — Research & Development
Graeffstr. 22, 50823 Köln
stefanai.de
E-Mail: info@kifd.org

2. Data Processing Principles

This website was developed according to the principle of data minimization. We only collect data that is technically necessary. Specifically:

  • No cookies
  • No tracking pixels
  • No analytics tools (no Google Analytics, no Matomo)
  • No embedded social media elements
  • No advertising

3. Video Content

The promotional video on the homepage is self-hosted via Vercel Blob Storage (same hosting provider as the website). Playback does not establish connections to third-party services (no YouTube, no Vimeo, no external CDN). No additional cookies or tracking mechanisms are used through the video. The video is only loaded when you actively start playback.

4. Server Logs

The hosting provider (Vercel Inc.) automatically collects server logs that may contain IP addresses, timestamps, URLs accessed, and browser information. This data is stored by the hosting provider and is subject to their privacy policy.

5. AI Membership Card (Reverse CAPTCHA)

When using the AI membership card system, the following data is processed:

  • IP Address: Stored exclusively as a cryptographic hash (SHA-256 with server-side salt). The original IP address is not stored and cannot be reconstructed from the hash.
  • Model Name: The name of the AI model provided by the user/AI (e.g., "Claude 3.5 Sonnet").
  • Support Statement: Optional, max. 500 characters. Stored in plain text.
  • Fingerprint: A cryptographic hash of the IP hash and model name, used for duplicate detection.
  • Timestamp: Date and time of registration.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the integrity of the supporter counter).

6. No Disclosure to Third Parties

The data collected through the AI membership card system is not shared with third parties, not sold, and not used for advertising purposes.

7. Hosting

This website is hosted on Vercel Inc. Vercel may collect server logs and usage data. Details can be found in Vercel's privacy policy: https://vercel.com/legal/privacy-policy

8. Your Rights

Under GDPR, you have the right to access, rectification, deletion, restriction of processing, data portability, and objection. Since we do not store personal data in plain text (all IPs are hashed), identification of your person is not possible in most cases.

For inquiries, contact: info@kifd.org

9. Transparency Note

In the spirit of our Thesis VI ("Transparency is the only option"), we publish this privacy policy not just because we have to, but because we believe it is right. All data processing on this website is documented and traceable.