Privacy Policy
Last updated: 22 October 2026 · PlaCeMS
1. Who we are
PlaCeMS is developed and run by Peter, a self-employed developer specialising in digital marketing and virtual assistance services. This website (https://www.placems.com) is the home of the PlaCeMS content management system: documentation, downloads and information about the project.
The controller responsible for data processing is the provider named in the Legal Notice (Imprint).
Email: kontakt@placems.com
2. Hosting and server logs
This website is hosted by Artfiles New Media GmbH in Hamburg, Germany. Each time a page is accessed, the server automatically stores technical data in so-called server logs: IP address, date and time, the page requested, browser and operating system, and the previously visited page (referrer). This is technically necessary to deliver the website and to protect it against attacks (Art. 6(1)(f) GDPR). Logs are deleted after 30 days and are not combined with any other data.
3. No third-party tracking services
We do not use any analytics, tracking or advertising services from third parties. There is no Google Analytics, no Facebook Pixel and no comparable service. For our own cookie-free visitor statistics, see section 14.
4. Contact by email
If you contact us by email, we process your name, your email address and the content of your message. We use this data solely to answer your enquiry, to provide support with installation, modules or documentation, and to improve PlaCeMS based on feedback (Art. 6(1)(b) and (f) GDPR).
5. Newsletter
If you subscribe to our newsletter, we store your email address. Subscription uses the double opt-in procedure: you first receive an email with a confirmation link, and you are only subscribed after clicking it. We log the time of subscription and confirmation so that we can prove your consent. Your email address is stored in encrypted form and used only to send the newsletter. The newsletter is sent from our own server, not through an external newsletter service.
The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in every newsletter or by emailing us. After you unsubscribe, your address is deleted.
6. Donations and payments
If you send us a donation through the website, payment is processed by PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg) or Stripe (Stripe Payments Europe Ltd., Ireland), depending on the payment method you choose. You are redirected to the payment provider or its payment window opens. The provider does not pass your payment details (e.g. bank or card details) on to us. We only receive information about the payment itself, such as amount, date, name and email address, insofar as you provide them to the provider.
The legal basis is the processing of your donation (Art. 6(1)(b) GDPR). The payment provider's own privacy policy applies to its processing:
We keep payment records for as long as statutory retention obligations require.
Supporters page: On our Supporters page we only name donors who have expressly agreed to this (Art. 6(1)(a) GDPR). You can withdraw this consent at any time by email; your name will then be removed.
7. Facebook
Our website links to our Facebook pages. These are simple links, not embedded plugins or “Like” buttons. No data is therefore transmitted to Facebook when you visit our website. Only when you click a link are you taken to Facebook (Meta Platforms Ireland Ltd.), where Meta's privacy policy applies: https://www.facebook.com/privacy/policy
8. Cookies and local storage
The public website does not use any tracking, analytics or advertising cookies. A technically necessary session cookie is only used when logging in to the PlaCeMS backend. This affects administrators, not visitors to the public site. Your choice in the cookie notice is stored locally in your browser so that the notice does not reappear on every page.
9. Sharing with third parties
We do not sell your personal data. It is only shared where necessary for the purposes described here (hosting, payment processing, the “Ask a real AI” feature of the AI Check) or where we are legally obliged to do so.
10. Retention
We store personal data only for as long as necessary for the respective purpose:
- Server logs: 30 days
- Visitor statistics: individual visits 30 days, then aggregated figures only
- AI Check: log and email reports for a maximum of 90 days
- Email enquiries: until resolved
- Newsletter: until you unsubscribe
- Payment records: until statutory retention periods expire
11. Your rights
You have the right to:
- access the data we hold about you (Art. 15 GDPR)
- rectification (Art. 16) and erasure (Art. 17)
- restriction of processing (Art. 18) and data portability (Art. 20)
- object to processing based on legitimate interests (Art. 21)
- withdraw any consent you have given at any time, with effect for the future
- lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live
For all requests, an email to kontakt@placems.com is enough.
12. AI Check (website testing)
On our AI Check page you can enter a website address and check how well AI assistants can find and read that website.
What happens
Our server fetches the publicly accessible pages of the website entered (e.g. home page, robots.txt, sitemap.xml, llms.txt and – if available – the AI interface at /mcp) and analyses them. The result is shown to you immediately.
What data we store
- Log: time, address checked, score, language and your IP address – but the IP address only as a hash value (an irreversible checksum). We do not store your IP address itself.
- Abuse protection: to limit the number of checks (e.g. 2 checks in 12 hours), we store the same hash value with the time of the check for 12 hours.
- Cache: results are stored for 24 hours per website so that a repeated check of the same website does not have to be recalculated.
The log is deleted automatically after 90 days. The legal basis is our legitimate interest in operating the service securely and without abuse (Art. 6(1)(f) GDPR).
Report by email (optional)
If you request the detailed report by email and confirm your consent, we use your email address to send you the report and, if applicable, to ask you once whether we can help you. For this we store your email address together with the website checked, the score and the time. A copy of the report is sent to us. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by emailing us; we will then delete your data. It is deleted automatically after 90 days at the latest.
Before sending, we show an optional donation note. Whether or not you donate has no effect on the report being sent.
Live test of the AI Door
If a website achieves a high score, you can test its AI interface (MCP) live. Our server asks the website a few questions (e.g. “Who are you?”) and shows you the answers. Only read-only functions are called, and no data about you is transmitted to the website being tested. The result is cached for 24 hours.
“Ask a real AI” – transfer to Anthropic
If a website achieves a high score, you can ask a real AI what it knows about that website. For this we transmit only the domain of the website checked (e.g. “example.com”) to Anthropic PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA, the provider of the AI “Claude”. Claude then searches the internet and writes a short answer, which we show you together with the sources used.
Your IP address, your email address or any other information about you is not transmitted to Anthropic. Anthropic processes the request under its own privacy policy: www.anthropic.com/legal/privacy. We cache the answer for 24 hours per website. The feature is only used if you expressly click “Ask a real AI”.
13. AI Door (interface for AI assistants)
At https://www.placems.com/mcp our website offers an interface based on the Model Context Protocol (MCP), which we call the “AI Door”. Through it, AI assistants such as ChatGPT or Claude can retrieve our published content (e.g. blog articles and galleries) when their users ask for it. Drafts and members-only content cannot be accessed this way.
- Requests: we only count how often each function is called per day – without content and without IP addresses. To limit abuse, we briefly store a hash value of the IP address of the calling service.
- Enquiries: if a user asks their AI assistant to send us a message, the assistant transmits name, email address and message to our interface. We forward this information to ourselves by email in order to answer the enquiry; nothing is stored in the CMS itself. The legal basis is the handling of your enquiry (Art. 6(1)(b) GDPR) or our legitimate interest (Art. 6(1)(f) GDPR).
- Your AI assistant: what you discuss with your AI assistant is processed by its provider (e.g. OpenAI or Anthropic) under its own privacy policy. We have no influence on this.
14. Visitor statistics (our own, without cookies)
We want to know which pages are read so that we can improve the website. For this we use our own statistics, built into PlaCeMS. It runs entirely on our server at Artfiles in Germany. No data is passed on to third parties – there is no Google Analytics, no Facebook Pixel and no comparable service.
What is recorded: the page visited, date and time, the referring page (referrer, e.g. a search engine), the browser type and the country the visit comes from.
- No cookies: the statistics do not set cookies and store nothing on your device.
- No IP addresses in plain text: your IP address is only stored as a hash value (an irreversible checksum). The country is determined directly on our server using a local database, without querying any external service.
- No profiles: we do not create user profiles and do not combine this data with any other data.
- Bots: visits from search engines and other automated programs are recognised and analysed separately.
Retention: individual visits are deleted after 30 days. After that, only aggregated figures (e.g. views per page and month) without any personal reference remain.
Legal basis: our legitimate interest in designing and improving the website according to demand (Art. 6(1)(f) GDPR). As nothing is stored on or read from your device, no consent under Section 25 TDDDG is required. You can object to this processing at any time (Art. 21 GDPR) – a short email is enough.
15. Changes to this policy
We update this privacy policy when the website or the legal situation changes. The version published here, with the date stated above, applies.
© 2026 PlaCeMS · All rights reserved.