Privacy Policy
Which personal data is processed when you visit Mt2Alerts, for what purpose and on which legal basis (GDPR, German TDDDG).
Controller
The controller responsible for data processing on this website is:
Hosting and server logs (Cloudflare)
The website and its interfaces run on Cloudflare Pages by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). With every request Cloudflare processes technically necessary data: IP address, date and time, requested address, referrer, and browser and device type. The purpose is delivering the pages, security (e.g. defending against attacks) and error analysis. The legal basis is our legitimate interest in secure and stable operation (Art. 6 (1) (f) GDPR). We do not keep our own access logs containing IP addresses.
Cookies and local storage
The website itself only sets technically necessary entries without tracking: a language cookie and entries in your browser's local storage (language, last selected region and server, a sign-in marker). They are strictly necessary for the features you request (§ 25 (2) no. 2 TDDDG), stay on your device and can be deleted at any time in your browser settings. The full list is in the cookie notice.
Sign-in with Google (Firebase)
Signing in is optional and only needed for Premium. It uses Firebase Authentication by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google sends us your user ID, name, email address and profile picture. Your profile (plan, Premium period, credit, orders and payments) is stored in Google Cloud Firestore. The legal basis is the performance of the user agreement (Art. 6 (1) (b) GDPR). The data is kept as long as your account exists; you can request deletion by email at any time unless statutory retention obligations (e.g. for payment records) apply.
When sign-in is enabled, every page loads the Firebase libraries from www.gstatic.com (Google) to check the sign-in status; Google receives your IP address and technical browser data. The legal basis is our legitimate interest in a working sign-in (Art. 6 (1) (f) GDPR).
Payment with USDT/USDC (Polygon)
Premium is paid by transferring USDT or USDC on the Polygon network. For your order we store the amount and matching code, timestamps and status, as well as the data of the incoming transaction (transaction hash, sender wallet address, token, amount). Blockchain transactions are public, permanently visible (e.g. on polygonscan.com) and cannot be deleted by anyone. To check incoming payments our server queries a Polygon RPC service; it only retrieves public blockchain data and does not transmit any data about you. The legal basis is the performance of the contract (Art. 6 (1) (b) GDPR); we keep payment records for the periods required by tax and commercial law (Art. 6 (1) (c) GDPR).
For the QR code in the payment window a library is loaded from the jsDelivr service (cdn.jsdelivr.net); the provider receives your IP address (Art. 6 (1) (f) GDPR).
Advertising (Google AdSense) and consent
For visitors without Premium we fund the website with ads from Google AdSense by Google Ireland Limited. The page loads code from pagead2.googlesyndication.com. Google may use cookies and similar technologies and process device and browser data, your IP address and information about your page views to deliver and measure ads, prevent fraud and, only with your consent, show personalised ads.
Visitors from the EEA, the United Kingdom and Switzerland are first asked for consent through Google's certified consent management platform (CMP) (IAB Transparency & Consent Framework). The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG); without consent Google shows at most non-personalised or limited ads. You can change or withdraw your choice at any time via “Privacy settings” in the footer.
No advertising code is loaded on the Pricing, Profile, Terms, Privacy, Cookies and Legal Notice pages, nor for signed-in Premium users.
- Google Privacy Policy
- How Google uses information from sites that use its services
- Google ad settings (My Ad Center)
Browser extension
The browser extension is downloaded as a ZIP file directly from this website; the hosting information above applies. What the extension itself processes is described for each extension on the “Extensions” page.
No analytics tools, no external fonts
We do not use any analytics or tracking tools of our own (no Google Analytics, no Facebook pixel). Fonts, icons, flags and wiki images are hosted on our own server; Google Fonts and other font services are not used. Links to other services (e.g. Discord, Polygonscan, Google) open their pages, where their privacy policies apply.
Transfers to third countries
Cloudflare and Google may also process data in the USA. This is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which both providers are certified, supplemented by standard contractual clauses (Art. 46 GDPR).
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7 (3)). You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in your place of residence. An email to the address above is enough for any request.
Changes
We update this policy when the website or the law changes. The version published here applies.