Privacy notice
Controller
Glowfish GmbH & Co. KG
Thurgaustraße 30, 81475 München, Germany
Email: info@glowfish.de
The principle behind this site
Uploaded images, fetched files and submitted texts are processed solely for the check you requested and deleted immediately after the answer. There is no database, no archive and no later evaluation. No data is passed to third parties: the entire check runs on our own server in Germany.
Processing of your input
- What is processed
- The file you upload, the address you enter together with the file fetched from it, or the text you paste.
- For what purpose
- Solely to carry out the check you requested.
- Legal basis
- Article 6(1)(b) GDPR – processing takes place at your request in order to provide the service; alternatively Article 6(1)(f) GDPR.
- Retention
- The file is placed in a working directory for the duration of the check and deleted afterwards, usually within seconds. Submitted text is processed in memory only.
- No further use
- Your input is not used to train models and not used for any other purpose.
Please note that images may contain personal data, such as identifiable people or location data in the metadata. Only upload material you hold the necessary rights to.
Usage limit
To protect the site against abusive load, the number of checks per origin is limited. For this purpose a hash is derived from your IP address and stored together with a counter for at most one hour. The IP address itself is not stored; the hash nonetheless counts as personal data. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in keeping the service available.
Access logs
No web server access logs are kept for this site. Application error messages are logged without IP address and without any content of the check, and deleted after 14 days at the latest.
Cookies and analytics
This site sets no cookies and keeps no session. The language choice is part of the address and is not stored. There is no analytics, no tracking pixel, no external fonts and no third-party content. Consent under section 25 TDDDG is therefore not required.
Fetching an address you provide
When you enter an address to be checked, our server fetches the file stored there. The provider concerned sees the IP address of our server, not yours. The fetched file is treated like an upload and deleted after the check.
Your rights
You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection (Article 21). Since nothing about your checks is stored, we cannot provide information about individual checks – we hold no data on them.
You have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.
Version
17 September 2026