Privacy policy

Controller

Name

Martin Dimitrov

Address

Pillersdorfgasse 13, 1020 Vienna, Austria

Email

hello@rackrate.dev

What this website does not do

• No tracking cookie. There is exactly one cookie, and only if you choose a language yourself — in the language selection in the page header or footer, or via the note offering the German version: "rr-lang" with the value "en" or "de", valid for one year. Your browser sends it with every request, but it is only read on the home page: that page forwards German-language browsers to /de/, but never against a language you chose yourself. Without the cookie, the home page follows the language your browser sends anyway. The cookie contains no identifier and is neither stored nor analysed. Your browser's local storage holds at most four values: "rr-de-hint-dismissed" (value "1") if you closed the note offering the German version, and the following three only in so far as you change something under "Display settings" in the page header: "rr:currency" the currency code (for example "USD"), "rr:vat" the price display (only ever the value "brutto") and "rr:vat-country" the country code whose VAT rate is applied (for example "DE"). They are never sent to us, contain no identifier and exist solely to keep the settings you asked for. Switching back to euro deletes "rr:currency"; switching back to net prices deletes "rr:vat", while the country you last picked is kept until you select Austria again. Because the cookie and these entries are strictly necessary for a function you explicitly requested, there is no consent banner.
• No measurement of page views, no tracking, no ad networks, no embedded social media content. Only clicks through to providers are counted, as described under “Links to providers”.
• No fonts, scripts or images from other servers. Everything is served from this domain; text is set in your device’s system font.
• No user accounts, no contact forms, no newsletter.

Filtering and sorting of the comparison run entirely in your browser. The selected state lives in the part of the address after the hash sign (#); browsers do not send that part to the server.

Hosting and access logs

When you request a page, the hosting provider processes technically necessary connection data, in particular the IP address, the time, the requested address and the browser identifier. The legal basis is the legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR).

Hosting provider

Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA

Logging and retention

When the site is accessed, Cloudflare, acting as a data processor, necessarily processes access data: IP address, date and time, page requested, browser and operating system. Without this data the site cannot be delivered or protected against attacks; the legal basis is the legitimate interest in doing so (Art 6(1)(f) GDPR). The logs are not combined with other sources and are deleted automatically according to the provider's retention periods.

Processing agreement and third-country transfers

Cloudflare operates its servers worldwide, so this access data may also be transferred to the USA. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework, for which the European Commission has established an adequate level of data protection (Art 45 GDPR); in addition, the standard contractual clauses in Cloudflare's data processing agreement apply.

Links to providers

The “View offer” button leads to the provider’s website via a redirect address on this site (/go/…). We pass on no data about you in the process. The destination address does, however, indicate that the visit came from RackRate.dev: the usual parameters utm_source=rackrate, utm_medium=referral and utm_content with the place on our site where you clicked (for example “product”); if the link is an affiliate link, the affiliate programme’s identifier instead. Your browser also tells the provider that you came from https://rackrate.dev — only the domain, not the page.

We count each such click on our server, to know which plans and providers are in demand and to be able to show providers how many visitors we send them. What is stored: the time, plan, provider, place on the page, the country the hosting provider derives from the connection, whether the request came from an automated client, and a daily key. The daily key is a truncated checksum of IP address, browser identifier, plan, date and a secret key; it only serves to avoid counting a double click twice, changes every day and allows no conclusion about the IP address. The IP address itself is not stored, and no cookie is set. The count is kept at the hosting provider (Workers Analytics Engine) and deleted there after three months; aggregated totals without the daily key are kept longer. The legal basis is our legitimate interest in evaluating and funding the service (Art. 6(1)(f) GDPR).

Once you are on the provider’s website, the provider’s privacy policy applies. The provider or its affiliate network may set its own cookies there to attribute a purchase; we have no control over that. We do not learn who you are; at most we receive a statement of referred purchases.

Contact by email

If you write to us, we process what you send in order to answer your request (Art. 6(1)(f) GDPR) and delete it once it is no longer needed for that purpose and no statutory retention duty applies.

Your rights

You have the rights of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). A message to the email address above is enough.

You may also lodge a complaint with a supervisory authority. In Austria that is the Datenschutzbehörde (dsb.gv.at).