ToolPulse Get the weekly email

Privacy Policy

Last updated: November 2026 — Applies to toolpulse.one.

1. Who we are (Controller)

Gerald Houché (sole proprietor / Einzelunternehmer)
Washingtonallee 33/1, 89231 Neu-Ulm, Germany
Contact: [email protected]

For the purposes of EU/UK GDPR, Gerald Houché is the data controller for personal data processed through this website.

2. What data we process and why

2.1 Visiting the website (hosting and delivery)

toolpulse.one is a static website delivered through Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA — hosting, content delivery network and security). When you open a page, your browser automatically sends technical data (IP address, browser type, requested URL, date and time) to Cloudflare's servers so the page can be delivered and abused traffic can be blocked. We do not receive or evaluate individual visitor logs.

  • Legal basis (GDPR Art. 6(1)(f)): our legitimate interest in a secure, reliable and fast website.
  • Processor: Cloudflare acts as our data processor under a data processing agreement. Data may be processed on servers worldwide, including the USA; Cloudflare relies on the EU–US Data Privacy Framework and Standard Contractual Clauses for such transfers.
  • Retention: We keep no copies of these logs. Cloudflare's privacy policy names no fixed period for them. It says personal information is stored for a period consistent with Cloudflare's business purposes.

2.2 Reach measurement (Cloudflare Web Analytics), no tracking

To understand how many people read ToolPulse and which pages are used, we use Cloudflare Web Analytics (Cloudflare, Inc., see 2.1). It loads a small script from Cloudflare that reports page views and technical data such as the visited page, referrer, browser and device type, and country. According to Cloudflare, the service uses no cookies and no local storage and does not fingerprint individual visitors (for example via IP address or user agent). We do not build visitor profiles, do not track you across sessions or websites, and use no tracking pixels and no advertising technology. We see only aggregated statistics.

  • Legal basis (GDPR Art. 6(1)(f)): our legitimate interest in knowing which content is read so we can improve it. You can object at any time (see section 4), for example by blocking the script in your browser.
  • Processor: Cloudflare, as described in 2.1.
  • Retention: According to Cloudflare, detailed data is kept for 7 days and then reduced to a sample of around 10%. We can view the statistics for the previous six months.

2.3 Cookies

This website sets no cookies and uses no local storage for tracking. Fonts are served from this website itself, so loading them sends no data to a font provider. When you start using the newsletter form, Cloudflare Turnstile stores a technical entry (cf.turnstile.u) in your browser's local storage for the bot check described in 2.6. In our own test on 6 November 2026 it set no cookies.

2.4 Contacting us by email

If you write to [email protected], we process your email address and the content of your message to answer you. Email is provided by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany) as our processor.

  • Legal basis (GDPR Art. 6(1)(b) or (f)): answering your request.
  • Retention: until your request is dealt with, and afterwards only as long as legal retention duties apply.

2.5 Referral (affiliate) links

Some links on this website are paid referral links, always marked "(paid link)". If you click one, you leave our website: the destination provider and its referral platform (for example Cello for Internxt) may set cookies or collect data such as your IP address to attribute the sign-up to us. We have no influence on that processing; please read the privacy policy of the respective provider. We do not request personal data from you through these links. The providers show us sign-ups and purchases made through our links and the resulting commissions or credits, depending on the provider also individually. We use this only to keep track of commissions and credits.

2.6 Newsletter

If you subscribe to the ToolPulse newsletter, we process your email address and the language you signed up in. You enter the address in a form on this website. When you submit it, it is sent through a small function running at Cloudflare (our hosting provider) to Brevo, our newsletter provider. To protect the form from automated abuse we use Cloudflare Turnstile (see below).

  • Bot check (Cloudflare Turnstile): Turnstile loads when you start using the form and checks in your browser whether you are a human. It processes technical data such as your IP address, a TLS fingerprint and browser details. Legal basis: our legitimate interest in protecting the form (GDPR Art. 6(1)(f)); for storing and reading information on your device, § 25(2) no. 2 TDDDG, because this is needed for the form you are using. Cloudflare acts as our processor for the check. According to its Turnstile privacy notice, Cloudflare is itself the controller for data it uses to improve its bot detection. The notice names no fixed retention period.
  • Consent and double opt-in (GDPR Art. 6(1)(a)): We only send the newsletter after you confirm your subscription in a confirmation email. To prove your consent, we store when your subscription was recorded and that you completed the double opt-in (legitimate interest in proof of consent, Art. 6(1)(f)). Providing your email address is voluntary. Without it we cannot send you the newsletter.
  • Provider: The newsletter is sent with Brevo (Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany) as our processor under a data processing agreement. Brevo hosts its data on servers in the EU (France and Belgium). Some of its service providers, such as Cloudflare and Zendesk, may also process data outside the EEA. For such transfers Brevo relies on safeguards such as the EU-US Data Privacy Framework and Standard Contractual Clauses.
  • Open and click measurement: Our emails measure whether they are opened and which links are clicked, in aggregate and per recipient, to understand which topics help readers. For this, links in our emails first pass through a Brevo address, and opening an email or clicking a link sends technical data such as your IP address to Brevo. You consent to this in the sign-up form (GDPR Art. 6(1)(a), § 25(1) TDDDG). You can withdraw by unsubscribing.
  • Unsubscribe and withdrawal: Every email contains an unsubscribe link. You can withdraw consent at any time, with effect for the future. After you unsubscribe we keep your address only on a suppression list so that you are not emailed again.
  • Retention: Until you unsubscribe. After that we keep your address on the suppression list described above, and the proof of your consent only for as long as we may need to demonstrate it.

3. Data sharing and third parties

We do not sell or rent your personal data and pass it on only as described in this policy. Service providers that process data on our behalf: Cloudflare, Inc. (hosting, delivery, security, sign-up form function and bot check), IONOS SE (email), Brevo (newsletter). Cloudflare also acts as an independent controller for the Turnstile purpose described in 2.6.

4. Your rights

4.1 EU/EEA residents (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Access your personal data (Art. 15)
  • Rectification of inaccurate data (Art. 16)
  • Erasure ("right to be forgotten") (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability — receive your data in a machine-readable format (Art. 20)
  • Object to processing based on legitimate interests (Art. 21)
  • Withdraw consent at any time, without affecting prior processing (Art. 7(3))

Right to object: You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 21).

We make no decisions with legal or similarly significant effects based solely on automated processing (Art. 22).

Contact: [email protected] — We respond within one month.

Right to complain: You can lodge a complaint with a supervisory authority (Art. 77), in particular in the EU country where you live or work, for example the Agencia Española de Protección de Datos (AEPD) in Spain. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA):
https://www.lda.bayern.de

4.2 UK residents (UK GDPR)

Your rights are equivalent to EU GDPR. Supervisory authority: Information Commissioner's Office (ICO)
https://ico.org.uk

4.3 California residents (CCPA/CPRA)

You have the right to know what personal information we collect, to delete it, to opt out of its sale or sharing — we do not sell or share personal information — and not to be discriminated against for exercising these rights.

Contact: [email protected]

4.4 All other jurisdictions

You may contact us at any time to access, correct, or delete your data. We process all reasonable requests promptly.

5. Data security

The website is delivered exclusively over HTTPS/TLS. We do not operate our own web server; hosting and delivery security are provided by Cloudflare.

6. Changes to this policy

Material changes will be published on this page. The date at the top always reflects the latest revision.

Written in plain language on purpose. Unclear about something? [email protected]