Privacy Policy

Last updated: 2026

1. Controller

The controller within the meaning of the GDPR is:

Philip Grassegger, Fastenberg 9, 29556 Suderburg.

Email: hello@kubaros.io

2. General information

We process personal data only to the extent necessary to provide a functional website and our content and services. The legal basis is in particular Art. 6 (1) GDPR.

3. Hosting

This website runs on servers in Germany. When accessed, technically necessary data (e.g. IP address, timestamp, requested resource, browser type) is processed in server log files (Art. 6 (1)(f) GDPR) and deleted after a short time.

4. Cookies

The Kubaros website uses only technically necessary cookies (e.g. for signing in to the customer area). No tracking or marketing cookies are used.

5. Registration and customer account

To use the customer area and book licenses, we collect the data required to perform the contract (e.g. company name, contact, email, billing address, VAT ID). The legal basis is Art. 6 (1)(b) GDPR. Data is stored in a MySQL database and used only for contract processing.

6. Kubaros appliance telemetry

The self-hosted Kubaros appliance that providers run on their own infrastructure periodically phones home to our license server to verify license status and check for updates. Only technical inventory data about the installation is transmitted: a random installation ID, the installed version and update channel, the configured hostname or base URL, and the appliance's public IP address. NO personal data of end-customers and no cluster contents are transmitted.

The legal basis is our legitimate interest in license enforcement, abuse prevention, operational statistics and the delivery of security-relevant updates (Art. 6 (1)(f) GDPR). Operators can disable this telemetry entirely at any time by setting the environment variable KUBAROS_TELEMETRY=off in the appliance.

7. Retention

We store personal data only as long as necessary for the stated purposes or as required by statutory retention periods.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), as well as the right to lodge a complaint with a supervisory authority.

9. Contact

For privacy enquiries: hello@kubaros.io.