Privacy policy

This policy tells you which personal data is processed when you visit guard.workban.de and download Workban Guard, for what purpose, on which legal basis and for how long, and which rights you have. It is a translation for convenience; the German version applies.

1. Controller

Christian Gluch
Münchner Straße 14
85614 Kirchseeon
Germany
Email: christian@cg-labs.dev

We have not appointed a data protection officer because there is no obligation to do so.

2. Hosting and recipients

The website and the downloads are hosted on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in its Nuremberg data center. Hetzner processes the data on our behalf under a contract according to Art. 28 GDPR.

The mailbox of christian@cg-labs.dev is hosted by mailbox.org, a service of Heinlein Hosting GmbH, Schwedter Straße 8/9A, 10119 Berlin, Germany, also under a contract according to Art. 28 GDPR.

All data stays in Germany; nothing is transferred to countries outside the EU. Every connection is encrypted with TLS. We do not sell data and do not use it for advertising.

3. Visiting the website

On every request the web server writes a log entry: IP address, date and time, requested address, status code, amount of data transferred, the page you came from and your browser's identifier.

Purpose

Running the website reliably, finding errors, detecting and fending off attacks.

Legal basis

Art. 6 (1) (f) GDPR. Our legitimate interest is a secure and working website.

Retention

We delete the logs after 14 days.

The website loads nothing from other servers: we serve the fonts ourselves, and there are no analytics tools, no tracking and no embedded third-party content. It sets no cookies and stores nothing in your browser.

4. Access and downloads

Only members of a Workban workspace we have enabled it for can download Workban Guard. On every request the server asks Workban whether your personal Workban token allows it. Workban is a service of the same operator and runs on the same server. It only reports your account id back; in addition to section 3 the download log holds that id, never the token.

Purpose

Access for licensees only, detecting misuse.

Legal basis

Art. 6 (1) (b) GDPR (license agreement) and (f) GDPR. Our legitimate interest is protection against unauthorized use.

Retention

The download logs for 14 days. Your Workban account is covered by the privacy policy of workban.de.

5. Email

If you write to us, mailbox.org stores your message together with your sender address.

Purpose

Answering your request and giving you access.

Legal basis

Art. 6 (1) (b) GDPR for requests about a license, otherwise (f) GDPR. Our legitimate interest is being able to answer requests.

Retention

As long as the request needs it. Records about a license are kept as long as the law requires.

6. Workban Guard on your computer

Workban Guard runs on your computer and sends us no data: no telemetry, no usage statistics. The audit log stays in the project folder.

Workban Guard makes two outgoing connections. For the package check it asks registry.npmjs.org, api.npmjs.org and pypi.org about the name of a package that is about to be installed. In a cold review the diff and the code go to the AI service of the agent you review with, through your own account. The respective providers are responsible for that processing.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data on the basis of Art. 6 (1) (f) GDPR, you can object (Art. 21). Write to christian@cg-labs.dev.

You can lodge a complaint with a data protection supervisory authority. The competent one is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

As of 22 October 2026