Privacy Policy

As of: November 2026. In case of doubt, the German version applies.

1. Controller

Quicopt GbR
Altermarkt 8
52441 Linnich
Germany

We have not appointed a data protection officer, as we are not required to. For all data protection questions, please contact us at the address above.

2. What this policy covers

This privacy policy applies to sign-up for Quicopt, your account on platform.quicopt.com, your API key and the emails we send you about it. The sign-up form is on quicopt.com, but the data you enter goes directly to platform.quicopt.com and is processed only there. Visits to the website quicopt.com are covered by its own privacy policy.

3. Hosting

platform.quicopt.com runs on a server of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, in its Falkenstein data centre (Germany). Hetzner processes the data as a processor under Art. 28 GDPR; a data processing agreement is in place.

No access logs. Our web server does not keep logs of individual page requests. We process your IP address only briefly in memory to limit abuse (at most 5 sign-ups per hour and IP address); it is not stored and is discarded after 24 hours at the latest. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

For the encrypted connection (TLS) we use certificates from Let's Encrypt (Internet Security Research Group, USA). Only the domain name and technical data needed to issue the certificate are transmitted, no user data.

These pages set no cookies and embed no analytics or tracking services.

4. Sign-up and account

Nothing is stored until you confirm

When you submit the sign-up form, we send you an email with a confirmation link. Your details are contained in this link, encrypted and signed; nothing is stored on our servers until you confirm. The link is valid for 24 hours. If you do not confirm, no account is created.

What we store with the account

name, email address (also your username) and, if provided, company;
your password only as a hash (Argon2id), never in plain text;
the language for our emails;
your plan (free access or evaluation access) and, if applicable, the end of the evaluation access;
the time of sign-up and confirmation and the versions of the terms of use, privacy policy and consent text you agreed to (proof of your consent);
your API key only as a hash (SHA-256) with its last four characters for recognition, plus the time it was created and, if applicable, blocked. We do not store the key itself; you receive it once by email.

Purpose and legal basis: providing free access under our terms of use, Art. 6(1)(b) GDPR. We store the proof of consent under Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR. Name and email address are required for the account; without them we cannot set up access.

API key check

When you solve an optimisation model with your key, our compute service asks platform.quicopt.com whether the key is valid. Only the hash of the key is transmitted. The answer contains whether it is active, your internal user ID and your plan, so that compute jobs are assigned to your account and the limits of your plan apply.

5. Emails with news and offers (consent)

Access to Quicopt is free of charge. In return, you consent at sign-up that we send you emails with news, tips, events and offers from Quicopt, at most about twice a month. We measure whether you open these emails and which links you click, and we analyse your usage, including the complete model contents, so that the offers fit.

Legal basis: your consent, Art. 6(1)(a) GDPR and § 7(2) UWG.

Withdrawal: you can withdraw your consent at any time with effect for the future, via the link in each of these emails or by writing to datenschutz@quicopt.com. Because the consent is the consideration for free access, free access ends with the withdrawal and we delete your account. Would you like to use Quicopt without marketing emails? Write to us and we will set up an ad-free access for you.

6. Sending of emails

We send our emails through the mail servers of STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, from the address noreply@quicopt.com. STRATO processes your email address and the content of the email as a processor under Art. 28 GDPR; a data processing agreement is in place.

7. Optimisation models

For every call to our optimisation service with your API key, we store the submitted model with all data it contains, the result, the solver log and technical details of the call (time, model class, size, channel), assigned to your account.

Retention: 24 months from the call; after that, model, result and log are deleted automatically. During this period we use them to analyse and improve our optimisation methods and services, and we analyse your usage as described in section 5. If you have your account deleted, we separate your calls from your account; the models are then kept without any reference to you.

Legal basis: Art. 6(1)(b) GDPR (providing the service under the terms of use) and, for the analysis for offers, your consent under section 5.

Please do not include personal, confidential or security-relevant data in models; the service is not designed for this.

Operation of the compute servers: The compute servers are operated by Forschungszentrum Jülich GmbH, Wilhelm-Johnen-Straße, 52428 Jülich, Germany, on its own infrastructure at the Jülich site (Germany). Models, results and logs are stored there.

8. Retention and deletion

We store your account data as long as your account exists. If you have your account deleted or withdraw your consent, we delete your account data and all API keys immediately. There are currently no backup copies of our database. We keep the email in which you requested deletion as proof.

9. Recipients and transfers to third countries

The only recipients of your data are the processors named above (Hetzner, STRATO) and Forschungszentrum Jülich GmbH as operator of the compute servers (section 7). We do not sell data and do not pass it on to third parties for advertising. Personal data is not transferred to countries outside the EU.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time (Art. 7(3)). Please write to datenschutz@quicopt.com. To protect your data, we reply to the registered email address.

You may also lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.