Agency Scripts
EnglishDeutschFrançaisEspañolPortuguêsРусскийالعربية中文हिन्दी

Products

Agency ScriptsAgency PhoneAgency PadCompanion AppComparisons

Resources

ToolsBlogChangelogDocumentationHelp & SupportServer Status

Community

DiscordYouTubeGamesAffiliateAll links
Shop
Privacy

Privacy Policy

How we handle your data, transparent and GDPR compliant.

The protection of your data has the highest priority for us. On this page you will learn how we process personal data - transparent, secure and of course GDPR compliant.

1. Responsible Entity (Verantwortlicher)

Agency Scripts, Sole Proprietor: Leon Rudolf
Die Halde 2
64853 Otzberg
Deutschland
E-Mail: [email protected]

2. Legal Basis for Processing (Art. 6 DSGVO)

We process personal data only on the following legal bases:

  • Art. 6(1)(a) DSGVO, Consent: For loading optional external services (Discord widgets, YouTube content, Brevo newsletter). These are only activated after your explicit consent via our privacy banner.
  • Art. 6(1)(b) DSGVO, Contract Performance: For processing affiliate applications submitted through our form.
  • Art. 6(1)(f) DSGVO, Legitimate Interest: For server log files required for website security, stability, and error diagnosis. Our legitimate interest is the secure and reliable operation of this website.

3. Access Data & Hosting

When accessing our website, technically necessary server log data is processed temporarily by our hosting provider. This includes: IP address, date and time of access, requested URL, referring URL, browser type and version, and operating system. This data is used exclusively to ensure secure delivery, operational stability, and abuse prevention. The IP address is stored in full in the server logs and deleted after 14 days at the latest. Legal basis: Art. 6(1)(f) GDPR.

Hosting Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare acts as a data processor on our behalf and processes data in accordance with the EU-US Data Privacy Framework. For details, see Cloudflare's Privacy Policy.

Cloudflare Web Analytics: In addition, we use Cloudflare Web Analytics, a cookieless performance telemetry (Real User Monitoring) that collects technical metrics such as load times. Legal basis: Art. 6(1)(f) GDPR, legitimate interest in a fast and stable website. Recipient is Cloudflare, Inc., USA. The transfer is safeguarded by Cloudflare, Inc.'s certification under the EU-US Data Privacy Framework.

4. Data Retention Periods

We retain personal data only as long as necessary for the respective purpose:

  • Server log files: Automatically deleted after 14 days at the latest.
  • Consent preferences: Stored in your browser's local storage until you clear it or withdraw consent.
  • Affiliate applications: Stored on Discord for the duration of the partner relationship. Deleted upon request.
  • Newsletter subscriptions: Stored by Brevo until you unsubscribe.

5. Cookies & Local Storage

This privacy policy also applies to companion.agencyg.de (our app landing page). It uses only functional Local Storage (language and theme) and sets no cookies, no analytics, tracking or consent banner is used there.

We use local storage (browser storage) and one first-party cookie only for technically necessary preferences:

  • Local Storage: language selection, theme preference (dark/light), exit popup display status.
  • First-party cookie agency_privacy_consent_v1 (scope: .agencyg.de, lifetime: 1 year): stores your privacy consent decision so you only have to decide once across our subdomains (agencyg.de, docs.agencyg.de, shop.agencyg.de). Contains a single boolean flag plus timestamp, no personal identifiers.

Before you grant consent, no tracking or marketing cookies are set. We do not use cookies for our visitor statistics: we run our own cookieless statistics in which the IP address is only processed as a strongly truncated hash that cannot be traced back. In the shop (shop.agencyg.de), a completed purchase is additionally reported server-side to Google Analytics; the shop's own privacy policy provides the details.

6. External Services (only after consent)

The following external services are only loaded after your explicit consent via our privacy banner. Without your consent, none of these services are called and no data is transmitted to them:

  • Discord (Discord Inc., USA): Embedded community widgets. Discord may process your IP address when loaded. Discord, Inc. is certified under the EU-US Data Privacy Framework. Discord Privacy Policy.
  • YouTube (Google LLC, USA): Video feed from our YouTube channel. Google may set cookies and process your IP address. Google LLC is certified under the EU-US Data Privacy Framework. Google Privacy Policy.
  • Brevo (Sendinblue GmbH, Germany): Newsletter form processing. Brevo Privacy Policy.
  • Cloudflare Turnstile: Spam protection for the newsletter form. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework. Cloudflare Privacy Policy.

7. Data Processors (Auftragsverarbeiter)

We use the following data processors:

  • Cloudflare, Inc., CDN and hosting (EU-US Data Privacy Framework)
  • Brevo (Sendinblue GmbH), Newsletter delivery (servers in EU)
  • Tebex Limited, UK, Payment processing for script sales (independent data controller for purchases). Tebex Privacy Policy.

Note: Purchases are handled entirely by Tebex. We do not process payment data or personal purchase information on our website.

8. Fonts (Self-Hosted)

We use the fonts "Inter" and "Orbitron" which are hosted locally on our own server. No connection to Google or other external font servers is established. No data is transmitted to third parties for font delivery.

9. Affiliate Applications

If you submit the affiliate application form, the data you enter (name, Discord name, email, social media) is transferred to Discord via webhook so we can review and process your application. This only happens after your active submission and consent confirmation inside the form. Legal basis: Art. 6(1)(b) DSGVO. Discord, Inc. (USA) is certified under the EU-US Data Privacy Framework.

9b. Social-Proof Display (shop.agencyg.de)

On shop.agencyg.de a subtle toast in the lower-left corner shows recent purchases ("Someone bought Agency-Phone 2 hours ago"). The data is fetched server-side from our Tebex account and strictly stripped of all personal data before reaching your browser: customer names, emails, UUIDs, gateway identifiers and payment amounts are removed on the server. Only the purchased product name, an ISO timestamp and a product thumbnail reach the browser. Legal basis: Art. 6(1)(f) DSGVO (legitimate interest in social proof for the storefront; no identifiable third-party data processed).

9c. Newsletter Opt-in (shop.agencyg.de)

Via the exit-intent coupon popup on shop.agencyg.de you can optionally submit your e-mail address to receive launch alerts and early-access deals. If you do, the following processor is used:

  • Sendinblue / Brevo (Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany), receives your e-mail address and a source tag ("exit-popup"). Double-opt-in is used: you receive a confirmation mail and only become an active subscriber after you confirm the link. You can unsubscribe any time with a one-click link in every e-mail. Brevo's privacy policy applies in parallel to this notice.

Legal basis: Art. 6(1)(a) DSGVO, explicit consent (the opt-in checkbox + your active form submission).

9a. AgencyAI chat assistant (agencyg.de, shop.agencyg.de, docs.agencyg.de)

On agencyg.de, shop.agencyg.de and docs.agencyg.de we offer an AI-powered chat ("AgencyAI"). When you send a message:

  • Your message text plus the previous messages of the current conversation (max. 12 turns) are transmitted to our server and from there to the AI provider OpenAI, Ireland Ltd., which generates the reply. Standard Contractual Clauses are in place for third-country transfers (USA).
  • Your conversation is stored only in your browser’s sessionStorage and is deleted when you close the tab. We do not keep chat contents on our servers.
  • For abuse protection we count requests per IP address. We do not store the raw IP: it is immediately hashed (HMAC-SHA256). Two salts are used: one rotates every 24 hours and carries the daily limit of ten questions per IP, a second rotates every seven days and carries the weekly limit of 50 questions. Only these non-reversible hashes plus timestamps are stored, for at most 24 hours and seven days respectively. The weekly counter is kept on disk so a restart of the service does not hand back questions already used.
  • A short, pseudonymous log line (eight characters of the hash, provider, language, number of turns) is written to our operational log for diagnostics and rotated as per section 4.

Legal basis: Art. 6(1)(f) GDPR, legitimate interest in providing AI support and preventing abuse and runaway costs (Recital 49 explicitly names network abuse prevention as a legitimate interest). You can always use the chat without identifying yourself; if you do not wish to use it, simply do not open it.

9d. Discord Wall of Fame (agencyg.de)

On our Wall of Fame page we display members of our Discord community with their Discord display name and their rank role. No other data is processed. The purpose is to present our community. The data comes from the Discord guild API and is cached on our side for at most 10 minutes. Legal basis: Art. 6(1)(f) GDPR, legitimate interest in presenting our community. You can object to being displayed at any time: sign in via the Discord login directly on the Wall page and opt out. Your entry is then placed on a permanent block list and is no longer shown. Discord, Inc. (USA) is certified under the EU-US Data Privacy Framework.

9e. Partner portal (partner.agencyg.de)

Via partner.agencyg.de you can apply to become a partner. In doing so we process your Discord identity, your e-mail address and your project details. The purpose is to review your application and to provide access to the portal. Legal basis: Art. 6(1)(b) GDPR. If your application is rejected, we delete your details.

9f. Weather feature of the product demos (Open-Meteo)

Our product demos include a weather feature. When you actively use it, your browser calls the services geocoding-api.open-meteo.com and api.open-meteo.com. This transmits your IP address, the location you selected and the language. The call is made only upon your action. Legal basis: Art. 6(1)(f) GDPR, legitimate interest in functional product demos.

9g. Feedback in the documentation (docs.agencyg.de)

On docs.agencyg.de you can voluntarily give feedback on individual pages. Your feedback is delivered to us internally via a Discord webhook. Please do not enter any personal data there.

10. Your Rights (Art. 15-21 DSGVO)

You have the following rights regarding your personal data:

  • Right of access (Art. 15 DSGVO)
  • Right to rectification (Art. 16 DSGVO)
  • Right to erasure (Art. 17 DSGVO)
  • Right to restriction of processing (Art. 18 DSGVO)
  • Right to data portability (Art. 20 DSGVO)
  • Right to object (Art. 21 DSGVO)
  • Right to withdraw consent (Art. 7(3) GDPR) at any time without affecting the lawfulness of prior processing

11. Right to Lodge a Complaint (Art. 77 DSGVO)

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the DSGVO. The competent supervisory authority for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
https://datenschutz.hessen.de

12. Privacy Contact

If you have any questions about data protection, you can contact us at any time at [email protected].

Last updated: September 2026