Privacy policy

Controller

Jibr GmbH, Heinrich-Franz-Möbs-Str. 19, 61231 Bad Nauheim, Germany. E-Mail: [email protected]. Full details: imprint.

What this website does

• The pages are static. Only your light/dark choice is stored in your browser (localStorage).
• To protect the website and the API against abuse, we count requests per IP address in short-lived, in-memory rate limiters (e.g. at most 60 API requests per minute, at most 5 form submissions per hour). These counters are never written to disk.
• The website runs on our own server and is delivered through Cloudflare (tunnel, HTTPS/CDN). Our server and Cloudflare process technically necessary data such as IP address, time and requested URL on the basis of Art. 6(1)(f) GDPR to deliver the site and protect it against abuse; log data is kept no longer than necessary for this purpose.
• The “Submit a shop” form sends the domain and, optionally, email and note to our own backend, which stores them with a timestamp in a local file on our server to process the submission; your IP address is used only for the rate limit above and is not stored with the submission. If you use the mail or GitHub fallback instead, the data goes to your own mail client or to GitHub, not to us. Retention: submissions are stored until they are processed (checked and added or rejected) and are deleted on request at the latest.
• Data about shops: public technical information we fetch ourselves (e.g. robots.txt, manifests, platform, page title). Logos are only links to the shop’s own icon; when shown, your browser loads that image directly from the shop (without referrer), so the shop sees your IP address. We do not publish names, private addresses or email addresses from imprints, only a country code where evidence exists.

Statistics we collect ourselves

We run our own, cookieless web analytics to understand how the site is used: a self-hosted OpenPanel instance at panel.xs1.nl (operated by us), with the script served from our own domain as /op1.js. There are no third-party analytics, no advertising and no cross-site tracking. For each page view we record:

• the URL and title of the visited page and the time of the visit;
• the referrer (the page that linked here, if your browser sends one);
• clicks on outgoing links, i.e. the destination URL and the link text;
• the metadata every HTTP request carries anyway (IP address, browser user agent), which our panel uses only to derive anonymous device and session IDs and aggregate figures such as country and browser share.

No cookies are set and no persistent identifiers are stored in your browser: the anonymous device/session IDs exist only in memory for the current visit, and events are only sent when you visit shopsforbots.com. You can switch the statistics off at any time by setting sfb-no-tracking in localStorage.

Your rights

Access, rectification, erasure, restriction, objection and complaint to a supervisory authority. Contact: see imprint.