Privacy Policy

We built smarterbrain.ai to hold as little of your data as possible. This policy explains, in plain language, what we collect, why, and the control you keep over it. Your passwords, your AI keys, and your conversations never reach us.

1. Who is responsible

The controller for your data under the GDPR / DSGVO is smarterbrain.ai, Keldachstraße 2, 40225 Düsseldorf, Germany. Contact: [email protected]. Full legal details are on our Impressum.

2. What we collect, and why

We are built around collecting as little as possible. We use no advertising trackers. Our analytics is either privacy-friendly and off until you opt in (Google Analytics 4 and Metricool; see below), or cookieless and always on (our self-hosted Umami, which counts anonymous activity and never identifies you).

Site analytics (always on, cookieless). This website at smarterbrain.ai loads a self-hosted, cookieless analytics tool (Umami) that runs on our own server at analytics.smbr.cc. It counts anonymous page views, scroll depth, and which links and buttons are tapped, sets no cookies, and does not identify you, so it runs without consent. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in seeing which content is useful, with no personal data collected).

Analytics (optional, off by default). If you opt in through the cookie settings, we additionally load Google Analytics 4 (provided by Google) to see which pages are useful, and the Metricool visit tracker (provided by Metricool Software S.L., an EU company) to see which of our social channels bring people here. Neither runs, and neither sets cookies, until you consent, and you can withdraw consent at any time. Legal basis: your consent, Art. 6(1)(a) GDPR.

Link page analytics (always on, cookieless). Our link-in-bio page at smbr.cc also loads the same self-hosted, cookieless analytics tool (Umami) at analytics.smbr.cc. It counts anonymous page views and which links were tapped, sets no cookies, and does not identify you, so it runs without consent. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in seeing which links are useful, with no personal data collected).

Contact form. If you write to us, we process the name, email address and message you submit, sent through our forms service at forms.websrv24.com so we can reply. Legal basis: Art. 6(1)(b) and (f) GDPR.

Spam protection. The contact form uses Cloudflare Turnstile to tell humans from bots, which processes limited technical data. Legal basis: Art. 6(1)(f) GDPR.

Your cookie choice. Your consent decision is stored only in your own browser (a localStorage value, sb_cookie_choice). It never leaves your device and is not a tracker. See Cookies below.

Server logs. Our hosting provider keeps standard web-server logs (IP address, time, page, user agent) to run and secure the site. Legal basis: Art. 6(1)(f) GDPR. They are kept only as long as needed for security, then deleted.

The AI assistant itself runs on a server that is yours. Your passwords, AI logins and conversations stay on your own server and never reach us.

3. Who we share it with

We use a small number of providers who process data on our behalf under a data-processing agreement: our forms service (forms.websrv24.com), Cloudflare (Turnstile), our hosting provider, and, only if you opt in to analytics, Google (Google Analytics 4) and Metricool Software S.L. We do not sell your data and we do not share it for advertising.

4. International transfers

Where a provider processes data outside the EU/EEA, we rely on an adequacy decision or the EU Standard Contractual Clauses. This includes Google (Google Analytics), in the United States, only if you opt in to analytics.

5. How long we keep it

Contact messages are kept while we handle your request and a reasonable time after, then deleted. Server logs have a short rolling retention for security. Your cookie choice stays until you clear it, in your own browser.

6. Your rights

Under the GDPR you can ask us for access, correction, erasure, restriction and portability of your data, and you can object to processing based on legitimate interests. Email [email protected]. You also have the right to complain to a supervisory authority; for us that is the LDI NRW (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).

7. Cookies and local storage

By default the site sets no tracking cookies; the only thing stored is your consent choice (sb_cookie_choice) in your browser's localStorage, which is essential and not shared. If you opt in to analytics, Google Analytics 4 and the Metricool tracker load and set their own cookies; until then they do not run. You can change or withdraw consent whenever you like, here or from the cookie settings on any page.

8. Changes to this policy

If this policy changes materially we will update this page and, where consent is affected, ask you again.