Privacy notice

E-Mail: contact@serialrisk.com
Phone: +49 176 47101401

When you visit, the infrastructure processes connection data such as IP address, time, requested address, browser and device information to deliver and secure the site and diagnose faults (Article 6(1)(f) GDPR). Hetzner hosts the service in Germany and Cloudflare protects and delivers it. SerialRisk uses no advertising, analytics, or session replay.

The sr_plan cookie is set only after you activate a subscription. It is necessary to access the plan (§25(2)(2) TDDDG), is not used for tracking, and expires after one year.

We store the submitted serial, brand, check time, result, technical check reference and, for paid checks, the order link. This is needed to perform and re-deliver the check, provide support, and prevent misuse (Articles 6(1)(b) and (f) GDPR).

Customer submissions are never used for training, never added to our counterfeit dataset, and never change future rules or results. They are not sent to AI or language-model providers. The result is informational and is not an automated decision producing legal or similarly significant effects.

For orders we process the email address, order and payment status, amount, consent records, and payment references returned by Stripe. Stripe processes payment details under its own responsibility. Brevo sends contract, result, access, withdrawal, and cancellation confirmations. After a paid single check you receive exactly one email; it contains the brand, the serial number and the result, and carries the result report and the contract confirmation as PDF attachments. The subject line does not name the result. No other email contains a serial number. The legal bases are Articles 6(1)(b) and (c) GDPR.

Brevo may technically redirect email links through r.em.serialrisk.com and record click time and destination. We do not send marketing email or newsletters.

Video preview images are served from our own server; viewing the page makes no connection to Google. YouTube is loaded only when you play a video. Google/YouTube may then receive IP, browser, device, referrer and interaction data and may read or set storage. Your deliberate selection is the basis for this processing (Article 6(1)(a) GDPR and §25(1) TDDDG). The rest of the site works without the video. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Recipients are limited to providers needed for the relevant purpose: Hetzner (hosting), Cloudflare (security and delivery), Stripe (payment), Brevo (transactional email), and Google (YouTube) after your click. Where processing occurs outside the EEA, providers rely in particular on adequacy decisions or EU Standard Contractual Clauses.

Unpaid orders are deleted or anonymised after a short operational period. For paid checks, purchaser identity is separated from the report after the third calendar year following purchase unless legal retention or a legal claim requires otherwise. Accounting data is kept only for statutory periods. Provider logs follow the agreed provider periods. Withdrawal and cancellation records are retained for evidence and legal claims.

Subject to the GDPR, you may request access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent. Contact contact@serialrisk.com. You may complain to the Bavarian Data Protection Authority or another competent supervisory authority.