Match Decoded

Privacy Notice

How personal data is handled on the Match Decoded website.

Last updated: August 20, 2026

Scope and current setup

This notice applies to the public website at matchdecoded.com. The website currently has no analytics, advertising, newsletter, account, contact form, or other visitor profiling. It does not use marketing or analytics cookies.

Controller

Benedikt Witecy
Rohrbachstr. 2a
85049 Ingolstadt
Germany
Email: benediktwitecy@proton.me

Hosting and technical data

The website is hosted through OpenAI Sites and delivered using Cloudflare infrastructure. When you open the website, technical data needed to provide and protect it may be processed automatically. This can include your IP address, the date and time of access, the requested URL, the referring page if sent by your browser, and browser, device, and user-agent information.

The purpose is to deliver the website reliably, maintain security, detect abusive traffic, and diagnose technical problems. The legal basis is Article 6(1)(f) GDPR. The legitimate interests are the secure, reliable, and technically efficient operation of the website. OpenAI and Cloudflare receive the data required to provide their hosting, delivery, and security services.

Further information is available in the OpenAI Privacy Policy and the Cloudflare Privacy Policy.

Essential security cookies

Cloudflare sets the strictly necessary cookie __cf_bm to distinguish legitimate traffic from automated or abusive requests. It expires after 30 minutes of inactivity. If Cloudflare presents a security challenge, it may also set cf_clearance so the challenge does not have to be repeated immediately.

These cookies are used only where necessary to provide and protect the website. They are therefore stored under Section 25(2) TDDDG without a consent banner; related personal-data processing is based on Article 6(1)(f) GDPR. They are not used by Match Decoded for advertising or analytics. See the Cloudflare cookie documentation for technical details.

Contact by email

If you contact Match Decoded by email, the email address, message, attached information, and related metadata are processed to answer your request. The legal basis is Article 6(1)(b) GDPR where the message concerns steps before entering into a contract, and otherwise Article 6(1)(f) GDPR, based on the legitimate interest in responding to enquiries.

Providing this information is voluntary. Email correspondence is kept until the request has been resolved and then deleted unless it must be retained for contractual, tax, commercial, legal-claims, or other statutory reasons.

International data transfers

Depending on the service configuration, hosting and security providers may process data outside the European Economic Area. Where the GDPR requires safeguards for such a transfer, recognized transfer mechanisms such as an adequacy decision or the European Commission's Standard Contractual Clauses are used. OpenAI provides further details in its Data Processing Addendum.

Retention

Match Decoded does not create a separate analytics database or visitor profile from website visits. Technical logs and security information held by the infrastructure providers are kept only for as long as required for delivery, troubleshooting, security, abuse prevention, and applicable legal obligations. The exact period can depend on the type of record and whether a security incident needs investigation.

Your data protection rights

Subject to the conditions in the GDPR, you may have the right to:

  • request access to and a copy of your personal data;
  • request correction or deletion of your personal data;
  • request restriction of processing;
  • receive data in a portable format where applicable;
  • object to processing based on legitimate interests for reasons arising from your particular situation; and
  • withdraw consent at any time where processing is based on consent.

There is no automated decision-making or profiling on this website. To exercise a right, email benediktwitecy@proton.me. You also have the right to lodge a complaint with a data protection supervisory authority.

Supervisory authority

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
www.lda.bayern.de

Providing data and changes to this notice

The technical data described above is necessary to load and secure the website; without it, the site cannot be delivered. Contacting Match Decoded by email is optional. This notice will be updated if the website or the way it processes personal data changes.

Back to Match DecodedLegal notice / Impressum
Privacy Notice | Match Decoded