Privacy Policy

This privacy policy applies to the website geostars.com in all language versions. The GeoStars app (app.geostars.com) is covered by the app privacy policy.

Last updated: 8 October 2026

We deliberately keep the website lean: it does not load fonts, videos, maps or analytics tools from third-party servers. A single third-party service, Google Ads conversion tracking, only runs if you expressly consent.

1. Controller

Suchhelden GmbH, Heinrichstraße 14c, 49080 Osnabrück, Germany
Represented by the managing directors André Hehemann, Dimitri Prugow, Oskar Majzner
Phone: +49 (0)541 507960-0, email: info@suchhelden.de

GeoStars is a brand and a product of Suchhelden GmbH.

2. Data protection officer

C&S Consulting, Matthias Wöstemeyer, Mittelheide 11, 49124 Georgsmarienhütte
Email: datenschutz@suchhelden.de

3. Hosting and server logs

The website is hosted on a server of our hosting provider Hostinger (Hostinger International Ltd. / UAB Hostinger, Lithuania) in a data centre in the EU. We have a data processing agreement with Hostinger.

Each time the website is accessed, the server automatically stores: IP address, date and time, requested address, amount of data transferred, status code, the previously visited page (referrer), and browser and operating system. We use this data only to deliver the website, find errors and fend off attacks. The logs are deleted regularly and are not combined with other data.

The legal basis is our legitimate interest in a secure and functioning operation (Art. 6(1)(f) GDPR).

4. No third-party resources

We serve fonts, images and scripts from our own server. We do not use analytics tools, social media plugins or embedded videos or maps on the website.

5. Consent banner and necessary cookies

On your first visit, we ask whether you agree to marketing tracking. We store your decision in the cookie gs_consent. It applies to geostars.com and its subdomains so that the app knows your decision and does not ask again, and it is deleted after about six months. After that, we ask again.

The legal basis is § 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(c) and (f) GDPR, because we must be able to prove and respect your decision.

You can change or withdraw your decision at any time via the “Cookie settings” link at the bottom of every page.

6. Google Ads conversion tracking (only with consent)

If you consent, we load the Google tag from Google Ads. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Without consent, the tag is not loaded and your browser does not connect to Google.

With the tag, we measure whether a visit that came from one of our ads led to a click on a link to the GeoStars app. This is how we manage our advertising budget.

• Data processed: ad click identifier (gclid, gbraid or wbraid), pages viewed, time, IP address, device and browser data.
• Cookies: Google sets cookies such as _gcl_au, _gcl_aw and _gcl_gb, with a storage period of up to 90 days.
• Transfer to the app: If you click a link to the app, the click identifier is passed to app.geostars.com so that a later start of the trial can be attributed to the ad. What the app does with it is described in its privacy policy.
• Result for us: aggregated statistics. We do not learn who you are.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Google also processes data in the USA. Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR); EU standard contractual clauses also apply. Further information: business.safety.google/privacy.

Withdrawal: at any time with effect for the future via “Cookie settings” at the bottom of every page. In doing so, we also delete the Google cookies of this website.

7. Links to the app and AI visibility check

If you enter a domain in a check or sign-up field on the website, we redirect you to the app and pass the domain in the address. Data is only stored there, in accordance with the app privacy policy.

Data from Google accounts: GeoStars requests read-only access only (Search Console: webmasters.readonly, Google Analytics: analytics.readonly, plus your email address to identify the account). We use this data solely to show you search queries, clicks, impressions and visits from AI sources in the connected project and to compare them with your AI visibility. We do not sell this data, do not use it for advertising, do not share it with third parties (except our processors for operating the service) and do not use it to train AI models. If you disconnect, we delete the access token. GeoStars' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Contact by email

If you write to us, for example at Cookie settingshello@geostars.com, we process your message and your contact details in order to answer your request. The legal basis is Art. 6(1)(b) GDPR if it concerns a contract or an enquiry about one, otherwise our legitimate interest in answering (Art. 6(1)(f) GDPR). We delete the data once the matter is resolved and no statutory retention obligations apply.

9. Recipients

Personal data is received only by the responsible employees, our hosting provider as processor, Google if you have consented, and authorities where we are legally obliged to do so. We do not sell data.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and withdrawal of consent given, with effect for the future (Art. 7(3)).

Right to object: If we process data on the basis of our legitimate interest, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

An informal message to datenschutz@suchhelden.de is enough. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example with the authority responsible for us, the State Commissioner for Data Protection of Lower Saxony.

11. No automated decisions

We do not make automated decisions within the meaning of Art. 22 GDPR and do not create profiles of website visitors.

12. Changes

We update this policy when the website or the legal situation changes. The version published here at any given time applies.