Last updated: 27 October 2026 · Applies to adtronaut.ai
This policy explains what personal data arises on adtronaut.ai and what happens to it: when you open a page, when you write to us, when we protect the form against bots and - only if you agree - when we measure visits and when we measure conversions for Google Ads. The site sets advertising cookies only with your consent.
No data protection officer has been appointed; Art. 37 GDPR does not require one for this processing.
When you open a page, technically necessary data your browser transmits automatically is processed:
Purpose: delivering the page, operational security, defending
against attacks and overload.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is secure,
uninterrupted operation.
Retention: these logs arise at the hosting provider and are deleted
automatically according to their schedule. We do not analyse them by person and do
not combine them with other data.
The site is operated on Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), including delivery over their network and the associated protection features. Cloudflare also runs our small server program that receives messages from the contact form, checks them and forwards them by email (section 4). Cloudflare acts as a processor under a contract pursuant to Art. 28 GDPR.
For transfers to the United States, see section 8.
You can write to us through the form on the home page, or by email to any of the addresses on this site.
The form asks for:
Your message also tells us the language of the page and the address of the page you sent it from, if your browser includes that address. Both appear in the email we receive.
You do not have to give us these details, but the form cannot be sent without the required fields. Instead, you can email us at contact@adtronaut.com. We then process your address, the content of your message and any other information or attachments you send us.
Purpose: to assign your enquiry, deal with it and reply to you. If it leads to an order, we also use the details for the quote and the contract.
The form sends your details to our server program on Cloudflare. It checks the message and then sends it via Microsoft Graph as an email from website@adtronaut.com to our mailbox contact@adtronaut.com in Microsoft 365, with your email address set as the reply-to address. The server program does not save your details in a store of its own, and it does not keep a copy in the Sent Items of the sending mailbox website@adtronaut.com. Emails you send us directly also arrive in Microsoft 365.
To stop automated programs from abusing the form, it contains a field that people cannot see. If that field is filled in, we do not forward the message. On top of that, Cloudflare Turnstile checks whether a person is filling in the form.
Turnstile only starts once you click into the form or select a field. Simply visiting the page does not load it. At that point your browser loads a check script from challenges.cloudflare.com. It runs small challenges in your browser and looks at features and capabilities of your browser to do so. According to Cloudflare, it receives your IP address, a technical fingerprint of the encrypted connection (TLS fingerprint), your browser's identifier (user agent), our form's site key and our website's address. According to Cloudflare, Turnstile does not read what you type into the form. Usually you will not notice the check. Turnstile only shows a short challenge when it is unsure.
Turnstile may store or read information in your browser for the check. This only happens once you start using the form.
The check script creates a single-use token. When you send the form, our server program passes this token and your IP address to Cloudflare to have it confirmed. Neither the token nor your IP address appears in the email we receive. If the check fails, your message does not reach us. In that case, please email us at contact@adtronaut.com.
Cloudflare runs the check on our behalf. It also uses the data as an independent controller to improve its bot detection (section 8).
We delete your enquiry and the related correspondence once it has been dealt with. We keep it longer only where the law requires it, for example for business letters and records relevant for tax. These are generally kept for seven years (§ 212 UGB, § 132 BAO). Cloudflare's Turnstile Privacy Addendum does not state a retention period for Turnstile data.
To see how often our pages are viewed and how fast they load, we use Cloudflare Web Analytics. It only runs if you agree, through the same notice as conversion measurement (section 6). Before you accept, the site loads nothing for it. If you decline, it stays that way.
If you accept, every page of this site, including the legal pages, loads a small script from static.cloudflareinsights.com. The script reads page-load timings from your browser (through the browser's Performance API) and sends them to Cloudflare. As with any request, Cloudflare receives your IP address.
What we see are aggregate figures: page views and visits, the page viewed, the referring page, country, device type, browser and operating system. According to Cloudflare, Web Analytics uses no cookies and no local storage for this and does not fingerprint individuals. Cloudflare states that it does not track visitors across its customers' websites.
Legal basis: your consent (Art. 6(1)(a) GDPR and § 165(3)
TKG 2021).
Withdrawing consent: you can withdraw your consent at any time via
the "Cookie settings" link at the bottom of every page. From the next page you open,
the site no longer loads the script. Withdrawal does not affect the lawfulness of
processing based on your consent before its withdrawal.
Retention: according to Cloudflare, the full measurement data is
kept for 7 days and then reduced to roughly a tenth. We can view reports for the
past six months.
We advertise on Google Ads. To measure which ads lead to enquiries, we use Google Ads conversion measurement. It only runs if you agree.
Until you have made a choice, every page shows a notice with two equally prominent buttons to accept or decline. Nothing is pre-selected. Before you accept, the site loads nothing from Google. If you decline, it stays that way.
If you accept, the site loads the Google tag (gtag.js) from Google. It may set Google Ads cookies. If you arrived through an ad, it reads the click identifier (gclid) from the page address. The cookies and the click identifier are used to match an enquiry to the ad that brought you here. For Google Ads, Google lists cookies including _gcl_au and _gcl_aw, each with a lifespan of 90 days (Google's overview). When you successfully send the contact form, the tag reports a conversion to Google. As with any request to Google's servers, Google receives your IP address and details about your browser. We do not use the tag for remarketing, that is, to show you targeted ads later.
The recipient is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Data may be passed to Google LLC in the United States (section 8). We are responsible for embedding the tag and for passing the data to Google. After that, Google processes the data as an independent controller, including for its own purposes. See Google's privacy policy.
Legal basis: your consent (Art. 6(1)(a) GDPR and § 165(3)
TKG 2021).
Withdrawing consent: you can withdraw your consent at any time via
the "Cookie settings" link at the bottom of every page. From then on, the site no
longer loads the Google tag. You can delete cookies already set in your browser.
Withdrawal does not affect the lawfulness of processing based on your consent
before its withdrawal.
Retention: the cookie lifespans are given above. Google's own
retention periods apply to the data passed to Google. Google states that it
anonymises advertising data in its server logs by removing part of the IP address
after 9 months and cookie information after 18 months
(Google's
information).
The site stores or reads the following in your browser:
The site needs the two entries for language and consent to carry out your choice (§ 165(3) TKG 2021). We use them for nothing else. You can delete them at any time in your browser settings.
We use no Google Analytics and we do not sell data. We make no automated decisions that have legal effects on you or affect you in a similarly significant way (Art. 22 GDPR). The bot check only decides whether a message reaches our mailbox.
For the avoidance of doubt: these statements concern the website adtronaut.ai only. The Adtronaut product itself is governed by separate contractual agreements.
We use these service providers:
We also disclose data where we are legally obliged to do so.
These providers may also process data in the United States, on the following basis:
You can request a copy of the safeguards at contact@volundra.com.
Under the GDPR you have the right to
Objection: where processing is based on our legitimate interests
(Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your
particular situation. We will then stop, unless we can show compelling legitimate
grounds that override your interests, or the processing is needed to establish,
exercise or defend legal claims.
Withdrawing consent: you can withdraw any consent at any time with
effect for the future. For visit and conversion measurement, use the "Cookie
settings" link at the bottom of every page.
Please write to contact@volundra.com.
You may lodge a complaint with a supervisory authority. In Austria this is the
We update this policy when the processing changes. The version published here, with the date shown above, applies.