Privacy notice

Controller under the General Data Protection Regulation (GDPR) for this website:

Philipp Lütje, sole proprietor, trading as “Philflow”
Am Kiebitzgraben 9, 22869 Schenefeld, Germany
Phone: +49 155 63696346
Email: hello@philflow.io

You submit a URL; our server fetches that address, inspects the response and returns what it detected. The URL you submit is processed in memory for the duration of that single request. It is not written to a database, not written to a log file and not associated with you. Nothing about a scan survives the response.

Detected product names and version numbers are checked against the public endoflife.date API. That request carries the product and version only — never your IP address, never the URL you entered.

Please note that scanning a site you do not own may be visible in that site’s own server logs, which are outside our control.

Opening this page causes the usual technical record to be written: IP address, date and time, the file requested, referrer URL, browser and operating system, and the name of your access provider. The purpose is a working connection, system security and stability. Legal basis is Art. 6(1)(f) GDPR. Server logs are deleted after 30 days.

We measure reach with Matomo, open-source software we run ourselves on our own server. Nothing is sent to an external analytics vendor and the data does not leave our infrastructure.

Matomo runs cookieless here: no cookie is set and no value is stored in your browser. Recorded are the page requested, the referrer URL, browser and device class, approximate region, and the time and length of the visit. Your IP address is truncated before storage and never kept in full. The URL you submit for scanning is never sent to Matomo.

To group several page views into one visit, Matomo derives a technical id from the truncated IP address and your browser characteristics. The secret behind that id is regenerated every day and kept separately per website, so recognition is confined to the current day and to this one site — it cannot reach across days or across sites. No merging with other data sources takes place.

The purpose is to see which parts of this tool are used. Legal basis is Art. 6(1)(f) GDPR; our legitimate interest is in developing the tool along actual use. Because no cookie is set and no information is otherwise accessed on your device, no consent under § 25(1) TDDDG is required. The collected data is deleted after 13 months.

You can object at any time. If your browser sends the Do-Not-Track signal, your visit is not counted.

This site sets no cookies and embeds no advertising or third-party services. Fonts are served from this domain, not fetched from anyone else.

This site runs on infrastructure of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in German data centres. Hetzner processes the data solely on our behalf under a data processing agreement pursuant to Art. 28 GDPR. There is no transfer to a third country.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent with future effect (Art. 7(3)).

You also have the right to lodge a complaint with a supervisory authority under Art. 77 GDPR. The one responsible for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.

You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data carried out under Art. 6(1)(e) or (f) GDPR.