This privacy policy informs you how we collect, store, use and protect your personal information when you’re using our platform.
This privacy policy applies to the use of the platform-as-a-service platform “Prefix” (hereinafter “website” or “platform”, operated by prefix.dev GmbH, (hereinafter “we”). The term “User”, “data subject” or “you” describes anyone using the Platform, including legal entities. For other definitions, please see Art. 4 GDPR.
The Controller within the meaning of the General Data Protection Regulation (Art. 4 no. 7 GDPR) is:
Prefix.dev GmbH
Französische Straße 12
10117 Berlin, Germany
e-mail: hi@prefix.dev
1. Types of data processed
When using the platform, especially when uploading and downloading software, we process the following personal data of our users:
- first and last name
- e-mail address
You are generally under no legal or contractual obligation to provide us with your personal data; however, we may only be able to provide certain offers to a limited extent or not at all if you do not provide the necessary data.
When you visit our website, a log data record (so-called server log files) is stored temporarily and anonymously on our web server. This consists of:
- the page from which the page was requested (so-called referrer URL)
- the name and URL of the requested page
- the date and time of the request
- a description of the type, language, and version of the web browser used
- the amount of data transferred
- the operating system
- a message indicating whether the request was successful (access status/HTTP status code)
- the GMT time zone difference
2. Purposes of data processing
We process the personal data specified above in accordance with the provisions of the GDPR, other relevant data protection regulations, and only to the extent necessary. Insofar as the processing of personal data is based on Art. 6 (1) (f) GDPR, the purposes mentioned also represent our legitimate interests.
Your personal data is processed for the following purposes:
- creation and management of your user account for the use of the platform
- authentication when logging in and using the platform functions
- communication with you regarding your uploaded or downloaded software
- ensuring the security and integrity of the platform
- performing technical maintenance and improving the platform functions
We do not intend to use personal data collected from you for any automated decision-making processes (including profiling).
3. Legal bases for data processing
The processing of your personal data is based on the following legal bases in accordance with Art. 6 GDPR:
- Art. 6 (1) (a) GDPR: consent for the processing of your data for the use of the platform
- Art. 6 (1) (b) GDPR: processing for the performance of a contract with you or for the implementation of pre-contractual measures
- Art. 6 (1) (f) GDPR: processing to safeguard our legitimate interests in the security and functionality of the platform and to prevent misuse
- The processing of log data serves statistical purposes and the improvement of the quality of our website, in particular the stability and security of the connection (legal basis is Art. 6 (1) (f) GDPR).
4. Storage period
Your personal data will only be stored for as long as is necessary to achieve the purposes for which it was collected. The following applies:
- Your registration data (first name, last name, e-mail address) will be stored for as long as your user account exists
- After your account has been deleted, your data will be permanently deleted within 30 days, provided that there are no legal retention obligations to the contrary
- Technical log data will be automatically deleted after 14 days, unless it is needed to investigate security incidents or for law enforcement purposes.
However, storage may continue beyond the specified period in the event of a (imminent) legal dispute with you or other legal proceedings, or if storage is required by legal regulations to which we are subject. When the storage period prescribed by law expires, the personal data will be blocked or deleted, unless further storage by us is necessary and there is a legal basis for this.
5. Rights of data subjects/users
As a data subject, you have the following rights:
a) Right to information
You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to access this data and to the information specified in Art. 15 GDPR.
b) Right to rectification
You have the right to request the immediate rectification of inaccurate personal data concerning you. Furthermore, you have the right to request the completion of incomplete personal data, taking into account the purpose of the processing.
c) Right to erasure
You have the right to request that we erase personal data concerning you without undue delay, provided that one of the reasons specified in Art. 17 GDPR applies.
d) Right to restriction of processing
You have the right to request the restriction of the processing of your personal data if one of the conditions specified in Art. 18 GDPR applies.
e) Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format.
f) Right to object
You have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation.
g) Right to withdraw consent under data protection law
You have the right to withdraw your consent to data protection at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
6. Data security
We take appropriate technical and organizational measures to ensure a level of security appropriate to the processing and to meet the requirements of the GDPR. The measures include:
- Encryption of data using transmission (SSL/TLS)
- Regular security checks and updates
- Access controls and authorization concepts
- Logging of access to data
- Training our employees in data protection
- Backup systems to ensure data availability
We take measures considering the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing, as well as the risks of a data breach (including its likelihood and impact) for the data subject. Our security measures are continuously improved in line with technological developments.
7. Transfer of data to third parties
Your personal data will only be disclosed to third parties if this is necessary for the purposes of processing or if you have expressly consented to this. Specifically, data may be disclosed to:
- Service providers that we use to operate the platform (e.g. hosting providers)
- Authorities or courts if we are obliged to disclose the data by law or by court order
All service providers are carefully selected and are contractually obliged to comply with data protection regulations.
8. Cookies and similar technologies
Our platform uses cookies and similar technologies to improve the use of the platform and to provide certain functions. Cookies are small text files that are assigned to the browser you are using on your hard drive and stored there, and through which certain information flows to the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer and therefore cannot cause any damage. They serve to make the Internet offering more user-friendly and effective overall, i.e. more pleasant for you. Cookies may contain data that enables the device used to be recognized. In some cases, cookies only contain information about certain settings that are not personally identifiable. Cookies cannot directly identify a user. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. In terms of their function, cookies are divided into:
- Technical cookies: these are strictly necessary to navigate the website, use basic functions, and ensure the security of the website; they do not collect information about you for marketing purposes, nor do they store which web pages you have visited,
- Performance cookies: these collect information about how you use our website, which pages you visit, and, for example, whether errors occur during website use; they do not collect any information that could identify you – all information collected is anonymous and is only used to improve our website and find out what interests our users,
- Advertising cookies, Targeting cookies: these are used to offer website users tailored advertising on the website or offers from third parties and to measure the effectiveness of these offers; advertising and targeting cookies are stored for a maximum of 13 months.
We use cookies to ensure that our website functions properly. It also allows us to optimize the website experience. These are the purposes of data processing.
Any use of cookies that is not strictly necessary for technical reasons constitutes data processing that is only permitted with your consent in accordance with Art. 6 (1) (a) GDPR. This applies in particular to the use of advertising, targeting, or sharing cookies. Furthermore, we only pass on your personal data processed by cookies to third parties if you have given your consent in accordance with Art. 6 (1) (a) GDPR. We only store your data for as long as it is necessary to fulfill the aforementioned purposes. The cookies are then deleted. If your consent pursuant to Art. 6 (1) (a) GDPR is the legal basis for data processing, you can revoke it at any time. You can do this by deleting the cookies in your browser.
9. Changes to this privacy policy
We reserve the right to amend this privacy policy in order to adapt it to changed legal requirements or changes to our services. The current version of this privacy policy can be viewed on our platform.
10. Contact options and data protection officer
If you have any questions about data protection or wish to assert your rights, you can contact us at any time. You can contact our data protection officer using these contact details:
Prefix.dev GmbH
Französische Straße 12
10117 Berlin, Germany
e-mail: hi@prefix.dev
As of: April 2026