Privacy Policy
Status: August 16, 2026This English version is provided for information purposes only. In case of discrepancies, the German version (Datenschutzerklärung) shall prevail.
1. Data Protection at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website and use our service. Personal data is any data that can be used to personally identify you.
Data Collection on this Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the "Information on the Responsible Controller" section of this privacy policy.
How do we collect your data?
Your data is collected, on the one hand, when you provide it to us. This may, for example, be data you enter during registration (username, email address) or product data (ASINs, keywords) you enter to use the service.
Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g., internet browser, operating system, or time of page access), collected automatically as soon as you enter this website.
2. Hosting
We host this website and the associated service with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter "Hetzner"). Processing takes place exclusively on servers located in Germany. No transfer to a third country outside the European Union takes place.
Details can be found in Hetzner's privacy policy: https://www.hetzner.com/legal/privacy-policy.
The use of Hetzner is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website. We have concluded a data processing agreement with Hetzner pursuant to Art. 28 GDPR.
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, and the IP address.
This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and security of its website; for this purpose, the server log files must be recorded.
3. General Notes and Mandatory Information
Information on the Responsible Controller
The responsible controller for data processing on this website is:
Luca Miele
c/o flexdienst – #12159
Kurt-Schumacher-Straße 76
67663 Kaiserslautern
Germany
Email: info@scrapycoco.com
Phone: +4915223819780
Storage Duration
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing it (e.g., retention periods under tax or commercial law); in the latter case, deletion takes place once these reasons cease to apply.
Rights of the Data Subject
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, if applicable, a right to rectification or erasure of this data. You also have a right to restriction of processing, a right to object to processing, and a right to data portability. You may contact us at any time regarding this and other questions on the subject of data protection.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
4. Data Collection on this Website
Registration and User Account
You can register on this website to use the service. The data entered (username, email address, password in encrypted form, selected time zone) is used exclusively to provide the user account and to fulfill the usage contract. During registration, you also confirm that you act as an entrepreneur within the meaning of Section 14 of the German Civil Code (BGB); the time of this confirmation is stored for evidentiary purposes.
Processing is based on Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures). The mandatory information requested during registration must be provided in full; otherwise, we may reject the registration. The data is deleted as soon as you delete your user account, unless statutory retention obligations apply.
Cookies and Local Storage
Our website uses exclusively technically necessary cookies or comparable storage techniques. These are required for the operation of the website — in particular, to manage the logged-in session (login), to ensure security (e.g., protection against cross-site request forgery), and to store your language preference.
These cookies are technically essential to provide the functions you have requested and cannot be deactivated. Processing is based on Section 25(2) TDDDG and Art. 6(1)(f) GDPR. A consent banner is not required, as we do not use any marketing or tracking cookies subject to consent.
5. Data Processing for the Provision of Our Services
Analysis of Amazon Rankings
To provide the core functionality of our service — the monitoring of Amazon rankings — we transmit the product data (ASINs) and search terms (keywords) you provide to a specialized external service provider for the automated collection of publicly available data. This service provider is Oxylabs, UAB, based in Vilnius, Lithuania (EU), and acts on our behalf as a data processor pursuant to Art. 28 GDPR.
The transmitted data (ASINs, keywords) does not constitute personal data. When analyzing publicly available product reviews, we collect and store exclusively the numerical total number of reviews and the average rating of a product. Names, content, or other information of individual reviewers is neither collected nor stored.
The processing is necessary for the performance of the contract pursuant to Art. 6(1)(b) GDPR, as we cannot carry out the commissioned analysis without this process. We have concluded a data processing agreement with the service provider ensuring processing in accordance with European data protection standards.
6. Analytics and Reach Measurement
Umami (self-hosted)
For the statistical analysis of the use of our website, we use the open-source analytics tool Umami. We operate Umami ourselves on our own infrastructure at Hetzner in Germany; no analytics data is transmitted to third parties or to a third country.
Umami operates without cookies and does not set any cookies on your device. No identifiers traceable across different websites are used, and no cross-device tracking takes place. Aggregated information is collected, such as pages viewed, approximate origin (country), browser type and operating system used, and the referring page. Your IP address is not stored in plain text; it is used solely to generate an anonymized, non-reversible identifier that is discarded and does not allow the identification of individuals.
Use is based on Art. 6(1)(f) GDPR. We have a legitimate interest in a privacy-friendly, anonymous analysis of usage behavior in order to technically optimize and improve our service. As the processing takes place without cookies and without personal reference, no consent is required.
7. Payment Processing and Email Delivery
Payment Service Provider (Mollie)
To process payments in connection with our paid services, we use the payment service provider Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. During a payment transaction, the data required for this (e.g., name, email address, payment data) is transmitted to Mollie or collected directly by Mollie.
Processing is based on Art. 6(1)(b) GDPR (performance of a contract). Mollie processes the payment data as an independent controller within the scope of payment processing. Further information can be found in Mollie's privacy policy: https://www.mollie.com/privacy.
Email Delivery (Brevo)
Our transactional emails (e.g., registration confirmation, password reset, technical notifications, and alerts) are sent via the service provider Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France.
We have concluded a data processing agreement with Brevo pursuant to Art. 28 GDPR. Data processing takes place on servers within the European Union. Processing is based on Art. 6(1)(b) GDPR (delivery of contractually required notifications) and Art. 6(1)(f) GDPR (legitimate interest in reliable and technically secure email delivery).
8. Bot and Spam Protection (ALTCHA)
On our login and registration pages, as well as on certain forms, we use the bot and spam protection "ALTCHA" to prevent misuse by automated programs (bots). We operate this protection on our own infrastructure.
A small computational task (proof-of-work) is performed in your browser to verify that a genuine use is taking place. No tracking cookies are set, and no profiling for advertising or analytics purposes takes place. Use is based on Art. 6(1)(f) GDPR; we have a legitimate interest in protecting our website and services from spam and automated attacks.