Privacy Policy

Email:

This website is operated on a virtual server (VPS). The hosting provider STRATO is involved; STRATO acts as processor and has access to the server infrastructure. A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO. On every visit, the server automatically records technical connection data (including IP address, date and time of access, requested page, referrer URL, browser type, and operating system) in server log files. This processing serves to ensure reliable operation and to detect and defend against attacks and abuse; this is my legitimate interest (Art. 6(1)(f) GDPR). It is technically required. Log files are deleted automatically after 15 days at the latest and are not combined with other data sources.

Processing the server log data is necessary for the technical operation of the website; without it, a page cannot be served. There is no statutory or contractual obligation to provide personal data. No automated decision-making, including profiling (Art. 22 GDPR), takes place. The servers are located in Germany; I do not transfer personal data to third countries outside the EU/EEA.

If you email me, I process your email address and the content of your message solely to answer your inquiry (Art. 6(1)(f) GDPR; for contract-related inquiries, Art. 6(1)(b) GDPR). The data is deleted once the inquiry is resolved, unless statutory retention obligations apply. This website has no contact form. Emails are received and stored via my email provider STRATO.

This website does not use analytics, marketing or tracking cookies, nor any third-party trackers. No usage profiles are created and no usage data is shared with third parties for advertising or analytics purposes. Audience measurement relies solely on a self-hosted, cookieless statistics tool (see "Audience measurement").

If you open a language version that differs from your browser's language, via the language switcher or a direct link, the server stores this choice in a technically necessary session cookie (NEXT_LOCALE, Path=/, SameSite=Lax) so the site is shown in the chosen language on later visits. The cookie contains only the language code and expires when the browser session ends. It is required to provide the language version you requested (§ 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR) and needs no consent.

For functions you trigger yourself, your browser stores data locally on your device (localStorage). This data is not transmitted to the server: your chosen light/dark appearance, your watchlist including its comparison baseline, the “established pools only” filter, your Academy learning progress, your inputs in the compound-interest calculator, and, in the DeFi Navigator, the search criteria you examined most recently (at most the last five, each with the number of matches found at that moment and the moment itself) together with the criteria sets you saved under a name of your choosing. In the yield dashboard this is joined by: the markets you opened most recently (at most the last eight, each with its symbol, protocol, chain and the moment — no figures are stored with them), the moment of your last visit and of the one before it, and the analysis steps you carried out (at most the last fifty), the watch reason and thresholds you set for a watched market, and the status you gave a watchlist change (in review, resolved or dismissed), and the positions and allocations in your model portfolio, and the assumptions you entered in the Scenario Lab (starting capital, duration, assumed rates and any scenarios you named yourself), and the dated entries in your Research Journal (your own text, optionally linked to a watched market). In the DeFi Terminal, the panel layouts you named are added (name, loaded market and the panels' codes, at most twelve; no figures) and – only if you couple windows – the identifier of the last loaded market with its time, so that coupled windows of this browser follow the same market. Entries are created only by your action and serve only the respective function (§ 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR); no consent is required. You can delete them at any time in your browser settings.

To understand which pages and features are used, we run the open-source software Umami. It operates exclusively on our own server (see "Hosting"); no data is transferred to third parties. Umami sets no cookies. It records the page viewed and its title, referrer, time, browser type, operating system and device type (derived from the browser signature your browser sends with every request) as well as country, region and city (derived from the IP address); for the page address and the referrer only the path, without search or filter parameters. It also records which features are used: opening a source in the evidence register, exporting a table as CSV, printing a dossier, and choosing an entry point on the homepage, including which of the offered entry points was chosen. It never records text you typed. Screen size and browser language, which the statistics script could determine in your browser, are removed before sending and are not transmitted. Before each transmission the script checks whether "Do Not Track" or "Global Privacy Control" (GPC) is enabled in your browser or measurement for this website has been switched off in your browser's local storage; in that case it sends nothing. Your IP address is not stored: to tell visits apart, a hash is computed from IP address, browser signature, a secret key and the calendar day. Because the calendar day is part of it, visits on different days cannot be linked to each other. The recorded data is deleted automatically after 13 months. The legal basis is our legitimate interest in minimal usage statistics (Art. 6(1)(f) GDPR). You can object to the measurement at any time by enabling "Global Privacy Control" or "Do Not Track" in your browser.

The DeFi metrics shown on this site (e.g. APY, TVL) are fetched server-side from public market data providers (including DeFiLlama). No personal data about your visit is transmitted to these providers, and your browser never connects to them directly.

This website links to third-party offerings (e.g. DeFi protocols, exchanges, DeFiLlama). When you click such a link, data such as your IP address is transmitted to that provider; its own privacy policy governs the processing there. Third-party content is not loaded automatically on this website.

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing (Art. 21) of your personal data. Please contact us at the address given above.

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR. I will then stop processing the data unless I can demonstrate compelling legitimate grounds that override your interests. To do so, please use the contact address above.

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent authority is, for example, the Berlin Commissioner for Data Protection and Freedom of Information.