Privacy Policy

Last updated: 25 July 2026

1. Controller

Alexander Hinze
Ludwigshöheweg 34, 12559 Berlin, Germany
Email: info@ranklog.de
Contact form: ranklog.de/contact

2. Data Collected & Purpose

The following personal data is processed when registering and using Ranklog:

• –Email address and company name – for account creation, login and communication (Art. 6(1)(b) GDPR)
• –Keywords and domains – to perform rank tracking on behalf of the user (Art. 6(1)(b) GDPR)
• –Consent records – date, time and version of the terms you accepted at registration, kept as evidence of the agreement (Art. 6(1)(c) and (f) GDPR)
• –Payment data – processed exclusively by Stripe, not stored on our servers (Art. 6(1)(b) GDPR)
• –Contact form entries – name, email address and message content, used solely to answer your enquiry (Art. 6(1)(f) GDPR)
• –Server log files – IP address, browser type, timestamp; stored automatically for a maximum of 7 days (Art. 6(1)(f) GDPR)
• –Error diagnostics – technical error reports including IP address and the request that caused the error, to keep the service stable and secure (Art. 6(1)(f) GDPR)

Our legitimate interest in the cases marked Art. 6(1)(f) GDPR lies in operating the service securely and reliably and in responding to enquiries addressed to us.

3. Recipients

Hosting

The application is hosted with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in data centres located within the European Union. Hetzner acts as a processor on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

Stripe (Payment Processing)

For subscription payment processing we use Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. With regard to payment data Stripe acts as an independent controller, not as our processor, and processes that data in accordance with the Stripe Privacy Policy. Card details never reach our systems.

Error Monitoring

We use Sentry to record technical errors. Error reports may contain the IP address and the request data of the session in which the error occurred. The provider acts as a processor on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

Search Data Providers (Ranking Queries)

To retrieve daily Google rankings we use specialised third-party SERP data providers. Only the keyword and the domain name entered by the user are transmitted. No personal data of our users is transmitted to these providers.

4. Cookies & Sessions

Ranklog uses only technically necessary session cookies to maintain the login state. No tracking cookies, analytics services or advertising cookies are used. Consent is therefore not required pursuant to § 25(2) no. 2 TDDDG.

5. Transfers to Third Countries

Individual service providers named in Section 3 may process data outside the European Economic Area or use sub-processors located there. Such transfers take place only where an adequacy decision of the European Commission applies or where appropriate safeguards under Art. 46 GDPR are in place, in particular the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914). You may request a copy of these safeguards from us at any time.

6. Retention Period

Account data is stored for as long as the account is active. After cancellation or deletion of the account, personal data is deleted within 30 days, unless statutory retention obligations apply (e.g. invoice data: 10 years pursuant to § 147 AO). Contact form enquiries are deleted once the enquiry has been dealt with conclusively and no retention obligation stands against deletion.

7. Your Rights

Under the GDPR, you have the following rights:

• –Access to stored data (Art. 15 GDPR)
• –Rectification of inaccurate data (Art. 16 GDPR)
• –Erasure of data (Art. 17 GDPR)
• –Restriction of processing (Art. 18 GDPR)
• –Data portability (Art. 20 GDPR)
• –Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

To exercise your rights, please contact info@ranklog.de. You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

8. Data Security

All data is transmitted exclusively via encrypted HTTPS/TLS connections. Passwords are never stored in plain text; they are hashed with a modern, salted algorithm (Argon2id) and cannot be read by us.