Privacy Policy

Last updated: April 2026

The legally binding version of this privacy policy is the German version (Datenschutzerklärung). This English translation is provided for convenience only.

1. Overview

This privacy policy informs you about the nature, scope, and purpose of the processing of personal data on this website. Personal data is any data by which you can be personally identified. We take the protection of your personal data seriously.

2. Controller

The controller responsible for data processing on this website within the meaning of the GDPR is:

Carlo Nölle
Bonner Straße 18, 50677 Cologne, Germany
carlo@codeattack.io

3. Hosting (Vercel)

This website is hosted by Vercel Inc., 340 Pine Street, Suite 900, San Francisco, CA 94104, USA. When you visit this website, Vercel processes technical connection data including IP addresses, browser type, operating system, referrer URL, and timestamps. This processing is necessary for the technical provision of the website (Art. 6(1)(f) GDPR — legitimate interest). Vercel acts as a data processor under a Data Processing Agreement (DPA) with us. Data may be transferred to the USA under the EU–US Data Privacy Framework (adequacy decision, July 2023). For more information see vercel.com/legal/privacy-policy.

4. Analytics (Umami)

This website uses Umami, a privacy-friendly, open-source analytics software. Umami is self-hosted on a Hetzner VPS in Frankfurt, Germany (EU). Umami does not use cookies and does not collect any personally identifiable information. It tracks anonymous, aggregated page views and visitor counts without cross-site tracking. No data is shared with third parties. The legal basis is our legitimate interest in understanding general usage patterns to improve the website (Art. 6(1)(f) GDPR). Because no personal data is processed, no opt-out is required; however, standard browser privacy settings and ad blockers will prevent Umami tracking if desired.

5. Database (Neon Postgres)

The model catalog powering this directory's search functionality is stored in a PostgreSQL database provided by Neon Inc. The database is located in the AWS eu-central-1 region (Frankfurt, Germany). The database stores only publicly available information about AI providers and models — no user data, accounts, or personal data of visitors. Neon acts as a data processor under a Data Processing Agreement. For more information see neon.tech/privacy.

6. GitHub (Issue Tracking)

This website links to GitHub for submitting change requests and data corrections. When you open a GitHub issue, you interact directly with GitHub's platform (GitHub, Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA). GitHub processes data according to their own privacy policy. Submitting an issue is entirely voluntary. We use GitHub issues to maintain accuracy of directory data in a transparent, auditable way. See docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement for GitHub's privacy practices.

7. Error Tracking (GlitchTip)

This website uses GlitchTip, an open-source error monitoring tool, to capture application errors and exceptions. GlitchTip is self-hosted on a Hetzner VPS in Frankfurt, Germany (EU) — the same infrastructure used for our analytics. Error reports may include technical information such as browser type, operating system, page URL, and a stack trace. This data is used solely to identify and fix software defects and is never shared with third parties. The legal basis is our legitimate interest in maintaining the reliability and security of the website (Art. 6(1)(f) GDPR). For more information see glitchtip.com.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)

To exercise these rights, contact us at carlo@codeattack.io. You also have the right to lodge a complaint with a supervisory authority. The competent authority for Cologne is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Postfach 20 04 44, 40102 Düsseldorf, Germany, ldi.nrw.de

9. Cookies

This website does not use cookies for tracking or advertising. A session cookie may be set by the hosting infrastructure (Vercel) for technical routing purposes only. No persistent tracking cookies are set.

10. Changes to this Policy

We may update this privacy policy from time to time. The current version is always available at this URL. Material changes will be reflected in the "last updated" date above.

← Back