Privacy Policy
This is a courtesy translation. The German version of this document is the legally binding one.
Information pursuant to Art. 13, 14 GDPR · Last updated: September 2026
1. Controller
The controller responsible for data processing on this website is:
Dennis WohlertLohhof 7
20535 Hamburg
Email: info@3dextruder.de
2. Your rights as a data subject
You have the right at any time to:
- access the data stored about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing (Art. 21 GDPR),
- withdraw consent you have given, with effect for the future (Art. 7 (3) GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), e.g. the state data protection authority responsible for your place of residence.
3. Hosting
This website is hosted by an external service provider (Cloudflare Pages — Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). When the pages are accessed, technically necessary connection data is processed. The legal basis is our legitimate interest in secure and stable provision (Art. 6 (1) (f) GDPR). A data processing agreement is in place with the provider (Art. 28 GDPR).
4. Server log files
The hosting provider automatically collects information in server log files transmitted by your browser: browser type and version, operating system, referrer URL, time of the request, and the (truncated) IP address. This data serves security and trouble-free operation. Legal basis: Art. 6 (1) (f) GDPR.
5. Interest list for the beta rollout
If you join the interest list, we process your email address, in order to inform you about the curated beta rollout of Basic, Pro and Business and about possible participation. Processing is based on your consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time — quickest via www.3dextruder.de/abmelden or via the unsubscribe link in our confirmation email — alternatively by informal email to info@3dextruder.de. When you unsubscribe, your entry is deleted in full (email address, time of sign-up and any voluntary feedback) and not merely flagged as unsubscribed. We store your address until you unsubscribe or the purpose (information about the beta rollout) no longer applies.
Sign-up happens via a form on this page. Your email address is transmitted to our own service (Cloudflare Worker) and stored there in a database at Cloudflare (data processing agreement, Art. 28 GDPR). No external form service (e.g. Formspree) is used; your input is not transmitted to any other third parties. The form is additionally protected against automated mass sign-ups by a spam check (Cloudflare Turnstile) — see section 11 for details.
6. Contacting us
If you contact us by email, we process your details to handle the request. The legal basis is our legitimate interest in responding (Art. 6 (1) (f) GDPR) or — for contract-related requests — Art. 6 (1) (b) GDPR. The data is deleted as soon as it is no longer required and no statutory retention periods apply.
7. Fonts
The fonts used on this website are served locally from our own server (self-hosted). There is no connection to Google servers; no IP addresses or other data are transmitted to Google or other third parties.
8. The desktop application "3D Extruder Control"
The app itself runs locally on your machine. Your business data (jobs, customers, invoices, inventory) stays locally on your device and is not transmitted to us.
Activation (required). The installation is activated with us once. This transmits: your email address and password to sign in to your account (we store the password only as a hash), for paid plans additionally the licence key, and about the device a random identifier generated locally at installation, the computer name, the operating system and the program version. From this we store a device record against your account in order to enforce the binding „one licence, one active device“ (Art. 6(1)(b) GDPR – performance of the contract). The same device data is sent again when the licence is renewed silently, as a rule roughly every two weeks. No business data is transmitted in the process.
Further outbound connections only occur if you set them up yourself:
- Printer/cloud connection: communication with your 3D printers or the manufacturer's cloud.
- Email/shop integration: only if actively configured by you.
- Update check: The app regularly asks our update server whether a newer release is available. In doing so it sends only its own version number and the operating system (e.g. “1.0.1-beta.1”, “darwin”) — no identifier, no fingerprint, no business data. We count these requests solely as a daily total per version and operating system, in order to see which releases are in use. Neither your IP address nor any other characteristic that would make you or your installation recognisable is stored.
9. Cookies
This website does not use any tracking or marketing cookies. Technically necessary storage (e.g. for the site to function) takes place without consent on the basis of § 25 (2) of the German TDDDG.
10. Cookieless page-view counting
To measure page views, each page load increments an aggregated counter via our own service (Cloudflare Worker). What is counted is the combination of:
- date of the request (day only, no time of day),
- page path (e.g. "/faq.html") – without anything after the question mark,
- referrer domain (the website you came from) – the domain name only, never the full address,
- country of origin (e.g. "DE"). It is supplied to us by our content delivery network with the request; we store no IP address for this. Nothing more precise than country level (i.e. no region, no city) is recorded.
- coarse device class – only "desktop", "mobile", "tablet" or "unknown",
- coarse operating-system class – only "Windows", "macOS", "Linux", "iOS", "Android" or "unknown". We do not store version numbers, browser identifiers or any other characteristics of your device.
- campaign identifier, if you arrived via a link we advertised (e.g. "tiktok"). Only a value from a fixed list defined by us is accepted; any other value is discarded. No other part of the address you opened is transmitted.
In doing so, no IP addresses, no device identifiers, no session identifiers and no cookies are stored. The counter only records how often such a combination occurred – not who caused it. Individual page views are not stored, and your page views cannot be linked to one another, nor to a sign-up on this website. Your browser's "Do Not Track" setting is respected – if it is set, we send nothing at all. The legal basis is our legitimate interest in privacy-friendly reach measurement (Art. 6 (1) (f) GDPR).
11. Protection against abuse
To keep our forms and interfaces from being abused by automated means (e.g. mass sign-up attempts or scanning for non-public addresses), we record conspicuous requests in a separate security log. What is stored: the time, the type of anomaly, the endpoint concerned, the number of attempts, a coarse classification of the program used ("browser", "bot", "tool") and the country of origin.
In order to recognise repeated attempts from the same source at all, we store a pseudonym instead of the IP address: a cryptographic check value derived with a secret key that changes daily. The IP address itself is not stored and cannot be recovered from the check value; from the following day onwards, recognition is no longer possible either. These entries are deleted automatically after 30 days.
Spam check in the sign-up form (Cloudflare Turnstile). The interest list form is protected against automated mass sign-ups. For this purpose the page loads a verification element from Cloudflare (challenges.cloudflare.com) and, when you submit the form, generates a single-use verification value which our service redeems with Cloudflare. In doing so, your IP address and technical details of your browser are transmitted to Cloudflare and processed there to tell a human apart from a program; Cloudflare already hosts this site (section 3) and acts as our processor (Art. 28 GDPR). No cookie for recognition is set, the verification value is spent after a single use, and we do not store it. No profile and no assessment of you as a person is created. The legal basis is our legitimate interest in keeping the interest list from being abused by automated sign-ups and in ensuring that third-party email addresses do not receive confirmation emails from us without their involvement (Art. 6 (1) (f) GDPR).
This data serves solely to prevent abuse. It is not used for advertising, not to evaluate individuals and not for reach measurement, and it is technically separate from the counters described in section 10. The country of origin alone is never treated by us as grounds for suspicion. The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR).
12. Changes to this privacy policy
We will update this privacy policy whenever the legal situation or our processing changes (e.g. with the introduction of payment and customer accounts). The current version applies.