Privacy notice

Datenschutzerklärung for bigcopilot.com

1. Controller

2. In short

Big Copilot sets no cookies of its own and includes no tracking or analytics scripts. Your saves are analysed only in your browser and are never sent to us.

3. Hosting

The website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit, Cloudflare processes your IP address, the date and time, the address requested and information about your browser, to deliver the site and protect it against abuse. We evaluate only aggregated statistics from this, such as the number of page views and the countries visitors come from. To defend against attacks, Cloudflare may set a strictly necessary cookie (§ 25(2) no. 2 of the German Telecommunications and Digital Services Data Protection Act, TDDDG). Cloudflare acts on our behalf, keeps this data only as long as these purposes require, and is certified under the EU-US Data Privacy Framework. We keep no access logs ourselves.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is running the website securely and reliably and having an overview of how it is used.

4. Data in your browser

Settings, the save folder you chose, saved searches and the market and cash history are kept in your browser's storage (localStorage, sessionStorage, IndexedDB). They do not leave your device. This storage is necessary for the features you use (§ 25(2) no. 2 TDDDG). You can delete this data at any time in your browser settings, and the history also with "Forget history".

5. Online count and votes

Online count: while you have the dashboard or the wiki open, your browser sends a random identifier to our server about every five minutes, so that we can count how many browser tabs currently have the site open. The identifier is created anew each time the page loads and is not stored in your browser. The server keeps only this identifier and the time; both are deleted within two days.

Votes: when you vote for a feature, we do not store your IP address but a hash derived from it with a secret key, together with the time of the vote, so that only one vote per connection counts. Both are deleted within one day after we close the poll.

To prevent abuse, we limit requests to these features per connection; this, too, uses only a short-lived hash of the IP address.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is operating these features and preventing abuse.

6. Contact by email

If you write to us, we use your details only to answer your request. Our mailbox is provided by Google (Google Workspace); transfers to Google LLC in the USA are covered by the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(f) GDPR. We delete the messages once your request has been dealt with.

7. External links and donations

Links to PayPal and GitHub open those providers' pages. Only then do they receive data from you, and their own privacy policies apply.

Donations are handled by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, as an independent controller. When you donate, PayPal gives us your name, your email address and the amount. We use these details only to process the donation and keep them for as long as we need them as a record of it. The legal basis is Art. 6(1)(b) GDPR, and Art. 6(1)(c) GDPR where a statutory retention duty applies.

8. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR). To exercise them, write to bigcopilot@hartwieg.com. You may also lodge a complaint with a data protection supervisory authority, for example the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA).

9. Right to object

You may object at any time, on grounds relating to your particular situation, to processing that we base on Art. 6(1)(f) GDPR (Art. 21 GDPR). To do so, write to bigcopilot@hartwieg.com.

Last updated: September 2026

Back to Big Copilot · Impressum