Privacy notice

In short

• Statistics with Google Analytics happen only if you click "Accept" in the notice. Without your yes, the page loads nothing from Google and sets no cookies. Advertising and personalisation always stay off.
• Fonts, images, the film and scripts come from our own server. Your browser also asks GitHub for the newest version number, so the download buttons point at the right file.
• The AyCode app sends no usage data. Chats, code and your vault stay on your computer.

Controller

Responsible for the processing on this website and in the AyCode app is:

Niccolo Bodenstedt
Ayont
c/o Postflex #7329, Emsdettener Str. 10
48268 Greven
Germany

Email: [email protected]
Website: ayont.me

Hosting

The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in Germany. Hetzner processes the data that arise when you visit on our behalf (Art. 28 GDPR). The legal basis is our legitimate interest in a secure and reliable service (Art. 6 (1) (f) GDPR).

Cloudflare

Between your browser and our server sits the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare provides the encrypted connection, delivers the page quickly and fends off attacks. For this, Cloudflare processes your IP address, the address you requested, date and time, and details about your browser and operating system. Your browser may also send technical error reports about the connection to Cloudflare (Network Error Logging).

The legal basis is our legitimate interest in a secure, fast website (Art. 6 (1) (f) GDPR). Cloudflare acts as our processor. For transfers to the USA, Cloudflare is certified under the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR); the EU standard contractual clauses apply in addition. More: https://www.cloudflare.com/privacypolicy/.

Access data

Whenever you open a page, your browser transmits technically necessary data: IP address, date and time, the address requested, the previous page (if your browser sends it), browser, operating system and the response status. The aycode.app web server itself writes no access logs. Cloudflare and the proxy in front of our server may log this data briefly to detect errors and attacks. We do not combine it with other data, do not analyse it to recognise visitors, and delete it as soon as it is no longer needed for this purpose. The legal basis is Art. 6 (1) (f) GDPR.

Version number and downloads via GitHub

So the page always offers the newest version, your browser asks GitHub's public interface (api.github.com) for AyCode's latest release when the page loads. GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA, receives your IP address, details about your browser and, as the origin, only "https://aycode.app". The download buttons lead to the releases on GitHub; when you click one, your browser downloads the file directly from GitHub.

The legal basis is our legitimate interest in offering you the current, matching file directly (Art. 6 (1) (f) GDPR). GitHub is certified under the EU-US Data Privacy Framework through Microsoft. More: GitHub privacy statement.

Your browser keeps GitHub's answer (only public facts about the release, nothing about you) for up to 30 minutes in this tab's session storage, so it does not ask again on every page. It is gone when you close the tab. This is strictly necessary for the download feature you requested (§ 25 (2) no. 2 TDDDG).

Google Analytics (only with consent)

If you agree, we use Google Analytics 4 (measurement ID G-4N0EMTW9WN), a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us which pages are read, which sections are viewed and which downloads are clicked, so we can improve aycode.app. For this, Google records among other things the pages viewed, time spent, clicks, approximate region, device type, browser, operating system and the previous page. Google Analytics 4 does not store IP addresses; Google uses them only briefly to work out the approximate region. Google signals, advertising features and personalisation are switched off.

Google Analytics sets the cookies "_ga" and "_ga_…" (lifetime up to 2 years), which recognise your browser. Google keeps the measurement data for us for 2 months and deletes it after that.

The legal basis is your consent (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG). Without a yes, gtag.js is not loaded and nothing is sent to Google. Google processes the data as our processor. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework (Art. 45 GDPR), and the EU standard contractual clauses apply in addition.

Withdrawal: with "Cookie settings" at the bottom of every page you can change your choice at any time with effect for the future; the page then also removes Google's cookies. More from Google: Google privacy policy.

Stored settings

If you switch between the light and dark design, your browser stores that choice as "aycode-theme" in local storage, so the page looks the same on your next visit. Your answer to the statistics notice is kept there as "aycode-consent" (yes or no and the date; we ask again after a year). These values never leave your browser; you remove them by clearing the site data for aycode.app. Storing them is strictly necessary for the function you chose (§ 25 (2) no. 2 TDDDG).

Film, images and docs search

The film, images, animations and the docs search are served from our own server. The film loads only when you press play. What you type into the docs search stays in your browser.

Contact by email

If you write to us, we store your message and contact details to answer your request and any follow-up (Art. 6 (1) (b) GDPR for requests about a contract, otherwise (f)). We delete them once the request is settled and no retention duty applies.

The AyCode app

• No telemetry. The app sends no usage or analytics data to us. Crash reports stay on your computer; they leave it only if you copy a diagnosis and send it yourself.
• Updates. The app asks GitHub's public interface for new versions and downloads updates from there. GitHub receives your IP address and the app's version string. The legal basis is Art. 6 (1) (f) GDPR (secure, current software).
• Coding agents. AyCode starts the programs of the providers you installed and signed in to yourself, such as Claude Code or Codex. Your prompts and code go from your computer directly to that provider, under its terms. We receive none of it.
• AyCode Cloud (optional). For your phone, team sessions and encrypted chat backups, you can sign in to the AyCode Cloud with GitHub. It runs on the same server in Germany and stores only what it needs, chat backups only end-to-end encrypted. Details (in German): AyCode Cloud privacy.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An email to [email protected] is enough.

Right to object (Art. 21 GDPR): where we process data based on our legitimate interest, you may object at any time on grounds relating to your particular situation.

You may also lodge a complaint with a data protection authority (Art. 77 GDPR). Ours is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, www.ldi.nrw.de.

Other

There is no automated decision-making or profiling. You are not obliged to provide data; without the technically necessary access data, however, the page cannot be delivered. The connection is always encrypted with TLS.