Privacy policy

Protecting your personal data matters to us. This notice explains which data we process when you visit this website.

Controller

Access data and server logs

When you access this website, the hosting infrastructure automatically collects and stores information in server logs, especially:

• The IP address of the requesting device
• The date and time of access
• The name and URL of the requested page or file
• The browser type and operating system used
• The previously visited page (referrer), if available

We process this data on the basis of our legitimate interest in operating a secure and stable website (Article 6(1)(f) GDPR). Log data is deleted promptly unless it is needed for longer to investigate or defend against attacks.

Hosting

The website runs on self-managed server infrastructure in Germany. The access data listed above is processed as part of hosting. The legal basis is our legitimate interest in providing our services securely and efficiently (Article 6(1)(f) GDPR).

Contact by email

If you contact us by email, we process your email address and the information in your message to answer your inquiry. The legal basis is Article 6(1)(b) GDPR when your inquiry concerns a contract or steps before entering into one; otherwise, it is our legitimate interest in answering inquiries (Article 6(1)(f) GDPR). We delete the data when it is no longer needed for this purpose and no statutory retention obligation applies.

Google Analytics

If you click “Accept” in the cookie notice, we load Google Analytics 4, a web analytics service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics then sets the cookies _ga and _ga_* (lasting up to two years) to count visits and page views. We use the analysis only to understand how the site is used. Before you click, no Google script loads and no data is transferred to Google. The legal basis is your consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG).

According to Google, Google Analytics 4 does not log or store IP addresses, but data may be transferred to Google LLC in the United States. Google LLC is certified under the EU–US Data Privacy Framework (EU Commission adequacy decision, Article 45 GDPR). We have entered into a data processing agreement with Google (Article 28 GDPR). User data stored by Google Analytics is deleted after no more than 14 months.

You may withdraw your consent at any time: click “Cookies” at the bottom of the page and choose “Decline”. More information is available at policies.google.com/privacy and support.google.com/analytics/answer/6004245.

Cookies and local storage

This website sets one technically necessary cookie: fn_consent stores your Google Analytics choice. It contains only that preference, expires after no more than one year, and is not used for advertising or tracking. This prevents the cookie notice from reappearing on every visit (Section 25(2)(2) TDDDG); the legal basis for processing is our legitimate interest in making the website user-friendly (Article 6(1)(f) GDPR). The website also sets the Google Analytics cookies described above, but only with your consent. We do not use ad networks.

For the language suggestion, an explicit language choice is stored in your browser's local storage for up to 180 days (fn_language_choice). Closing the suggestion is remembered for the current browser session (fn_language_dismissed_* in sessionStorage). Both entries only prevent the suggestion from appearing again after you have made a choice. The URL you open still determines the page language. You can delete these entries in your browser at any time.

Agent Readiness Check

When you start the Agent Readiness Check, we process the website address you enter and retrieve publicly available pages from that site: the homepage, up to four subpages, robots.txt, the sitemap, and llms.txt. We store the result with the address so you can access it by link and so the same address is not checked multiple times in one day.

To limit the number of free checks per day and visitor, we store a pseudonymized value with each check, calculated from your IP address using a secret key. We do not store the IP address itself. The value is deleted after two days. The legal basis is our legitimate interest in preventing misuse of the free service (Article 6(1)(f) GDPR).

We use Firecrawl to load the checked pages and a language model via OpenRouter to analyze their content. We send these services only the checked website address and that site's public content, not information about you.

We use Cloudflare Turnstile to protect against automated requests. Its script loads only when you start a check; Cloudflare then processes technical data from your browser and your IP address to detect automated access. The legal basis is our legitimate interest in protecting the service from misuse (Article 6(1)(f) GDPR).

If you request the full report, we store your email address with the check and email you a link to the report. We record the first time you open that link as confirmation of your address. The legal basis is providing the report you requested (Article 6(1)(b) GDPR). To keep the report unlocked on later visits, the website stores an access key in your browser's local storage (fn_agent_check_tokens). This is necessary for the feature you requested (Section 25(2)(2) TDDDG). You can delete the entry in your browser at any time.

We send further emails about Agent Readiness and AI systems only if you check the optional box when requesting a report and then confirm through the link in our email (double opt-in). To document your consent, we store its wording and the times of request and confirmation. The legal basis is your consent (Article 6(1)(a) GDPR). You may withdraw it at any time through the unsubscribe link in each email, on the Emails page, or by emailing contact@futurenaut.co. We then stop sending such emails and record the withdrawal so it is respected in future.

We send emails through our Google Workspace mailbox.

External links and appointments

This website links to external services, including Calendly for booking appointments. When you follow such a link, the provider's privacy policy applies. Simply displaying the link does not transfer personal data to the provider.

Your rights

Under the GDPR, you have the following rights:

• Access to data stored about you (Article 15 GDPR)
• Correction of inaccurate data (Article 16 GDPR)
• Erasure (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Objection to processing based on legitimate interests (Article 21 GDPR)

To exercise your rights, send an informal message to contact@futurenaut.co. You may withdraw consent at any time with effect for the future.

Right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority. Our competent authority is the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg. You may also contact the authority in your usual place of residence.

Changes to this privacy policy

We update this policy when legal requirements or website features change. The current version published on this page applies.