How Dudelytics handles data.

Translation note: This English version is provided for convenience. The German privacy notice is the original text.

1. Controller

Axel Lämmle
Sternstraße 10
82256 Fürstenfeldbruck
Germany

Email: webmaster@dudelytics.com
Contact: dudelytics.com/en/contact/

2. Hosting with STRATO

This website is hosted by STRATO. The provider is STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When the website is accessed, the web server processes technically necessary connection and access data so that the site can be delivered, operated reliably and protected against misuse. STRATO processes hosting data for Dudelytics under the agreed data-processing arrangement.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the provision of a secure, stable and technically functional website.

3. STRATO visitor statistics and log files

Dudelytics uses server-side visitor statistics supplied by the hosting provider STRATO. No proprietary Google Analytics, Matomo, Meta Pixel or comparable tracking code is executed in your browser for this purpose. According to STRATO, the hostname or IP address of the requesting client is anonymised in the log files provided for privacy reasons.

The statistical analysis is used to understand reach, page views, technical usage and errors and to improve Dudelytics. Dudelytics does not combine this information with user accounts or advertising profiles. According to STRATO's documentation, log files are provided for the last six weeks; graphical statistics may remain available for longer.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in reach measurement, error analysis, security and improvement of the service.

4. Aggregated Dudelytics usage statistics

Dudelytics counts selected product events server-side in its own analytics database to understand where the public entry flow and registration work well or create unnecessary friction. Examples include home-page views, clicks on central Dudelytics calls to action, registration attempts, email confirmations, successful logins and use of coin analysis.

Only daily event counts are stored together with, where available, a coarsely normalised source or an explicit UTM campaign name. Dudelytics does not store raw IP addresses, user agents, device identifiers, cookie IDs, email addresses, internal user IDs or free-text searches in this analytics database. Events are not connected into individual usage profiles and are not used for advertising. The measurement sets no analytics cookie and no local-storage identifier.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is improving entry, registration and usability of our own service using methods that minimise personal data.

5. Cookies, Local Storage and consent banners

On the public website, Dudelytics does not set its own analytics, marketing or profiling cookies and does not store advertising or tracking identifiers in the browser for these purposes. The aggregated usage statistics described in section 4 operate without such browser identifiers. The contact form continues to work without a user account and without a tracking cookie. For the personalised Web App at app.dudelytics.com, only a technically necessary session cookie is used after login so the user can remain securely authenticated and the personal area can be protected against unauthorised access. This session cookie is not used for advertising, reach profiles or cross-site tracking. No marketing or analytics consent banner is therefore planned for this technically necessary storage.

If external embeds or client-side tracking technologies are introduced in the future, this privacy notice will be updated before activation and consent will be obtained where required.

6. DPMI and CoinGecko

The DPMI is calculated server-side on dudelytics.com. Market data is retrieved server-side from CoinGecko and then delivered through Dudelytics. During a normal Dudelytics page view, your IP address is not sent by Dudelytics to CoinGecko merely because the DPMI is displayed. If you click an external CoinGecko link yourself, you leave Dudelytics and the destination provider's privacy terms apply.

7. Contact form and email

If you use the contact form, Dudelytics processes your email address, message and any name and subject you provide voluntarily. The information is sent to webmaster@dudelytics.com and used to handle your request. The form does not use an external CAPTCHA service.

The legal basis is Art. 6(1)(b) GDPR where your request concerns pre-contractual or contract-related communication; in all other cases it is Art. 6(1)(f) GDPR on the basis of the legitimate interest in being able to answer enquiries. The data is deleted when the request has been conclusively dealt with and no statutory retention requirements or legitimate interests require further storage.

Contact-form content is not automatically forwarded by the website to external AI services.

8. Voluntary support via PayPal.Me

Dudelytics contains plain links to PayPal.Me. PayPal content, scripts or cookies are not embedded in Dudelytics. Only when you click a PayPal link do you continue to PayPal. Personal and payment-related data is then processed by PayPal under its own privacy terms.

Through the PayPal account, Dudelytics receives the information that PayPal provides to the payment recipient for the processed payment. This data is used only to associate and process the voluntary support and, where necessary, to meet legal obligations.

9. Dude Tips and external referral links

Dudelytics does not embed tracking scripts, widgets or cookies from recommended providers on the Dude Tips page. Referral links are ordinary external links. Only when you click such a link do you continue to the respective provider. The destination URL may contain a referral identifier so the provider can technically attribute the referral. Dudelytics does not set an additional tracking cookie for this attribution and does not transmit account, watchlist or analysis content through the link. The destination provider's privacy terms apply to subsequent processing.

10. Newsletter and user accounts

The public website dudelytics.com remains freely accessible without a user account and continues not to offer a newsletter. A personalised Dudelytics Web App is additionally available at app.dudelytics.com. The Dudelytics Public Preview is open for public registration and is deliberately released in limited access waves. While places remain available in the current wave, access is activated directly after registration and email confirmation. If current capacity has been reached, the registered account is stored with waiting-list status and activated after a later release; Dudelytics may send a pure access notification by email for this purpose. In addition to the normal account status, the stored information for this control includes in particular access status, time of joining the waiting list, time of a later activation and the technical origin of access – for example public registration or a targeted invitation. The waiting list is used exclusively for controlled technical opening of the Public Preview and not for marketing or profiling. Personal single-use invitation links may continue to be used for targeted tests and can optionally be tied to a specific email address; server-side, only a cryptographic hash of invitation tokens is stored. The account supports personal functions such as cross-device synchronisation, watchlist, saved observations, settings and later alerts. During registration and account use, Dudelytics processes in particular the email address, a randomly generated internal user ID, account status, timestamps such as account creation, email confirmation and last login, and technically necessary authentication data. An optional Dude name and language setting can also be stored in the profile. Public Preview users may voluntarily submit structured bug, data, presentation and idea reports through the Dude Center; the selected area, type and weight of the report, free text entered by the tester, an optional page path, processing status and timestamps are stored. API keys, watchlist contents and other personal app content are not automatically attached to such feedback reports. Passwords are never stored in plain text and are stored only as cryptographic password hashes. Verification and password-reset links use random single-use tokens; only a hash of each token is stored in the database. For login and session management, the Web App uses a technically necessary secure session cookie. Limited rate limits are used to prevent automated login, registration and reset attempts. Dudelytics does not store the raw IP address for this purpose in the account database, only a server-generated HMAC-based identifier that cannot be directly reversed; this does not affect the hosting log files described in section 3 that are maintained by STRATO. Email addresses are used for account management, email confirmation, access notifications and password recovery, not for advertising or newsletters. The legal basis for processing data necessary to provide the user account, personal Web App functions and the personal Web App is Art. 6(1)(b) GDPR. Security measures, waiting-list/capacity control and abuse prevention are additionally based on Art. 6(1)(f) GDPR; the legitimate interest lies in secure, stable operation with low abuse. Account, profile, access and associated tester-feedback data is generally processed for as long as the user account or test purpose continues or the report is needed for product improvement. After account deletion or a justified deletion request, personal account data is deleted unless statutory retention duties or compelling security or legal-defence reasons require otherwise. Time-limited invitation, confirmation and reset tokens automatically expire.

11. External links and future embeds

Dudelytics links to external sources. An ordinary link transfers data to the destination provider only when you open it. External videos, social-media posts or comparable third-party content are currently not embedded automatically in the website. If that changes, privacy information and, where necessary, consent mechanisms will be adjusted beforehand.

12. AI-assisted editorial work

For public content, Dudelytics may use AI-assisted tools to support research, structure, summarise, translate, analyse or draft content. This does not automatically transfer personal data of website visitors to AI providers. Section 7 expressly applies to the contact form.

13. Your data-protection rights

Subject to the statutory requirements, you have rights including access, rectification, erasure, restriction of processing, data portability and objection. Consent that has been given may be withdrawn with effect for the future.

You may also lodge a complaint with a data-protection supervisory authority. For non-public bodies in Bavaria, the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, is in particular the competent authority.

14. Updates to this notice

If Dudelytics introduces new functions that process personal data differently – for example additional account or sync functions, newsletters, external embeds or additional tracking – this privacy notice will be updated accordingly.

Last updated: Sep 6, 2026