Privacy Policy for Nullstrasse

Effective Date: September 24, 2025

Welcome to Nullstrasse™. This Privacy Policy applies to all websites and online services operated under the Nullstrasse brand, including but not limited to https://nullstrasse, https://nullstrasse.com, https://nullstrasse.de, and all related subdomains such as https://www.nullstrasse.com. Nullstrasse trademark registration is currently undergoing through WIPO, and our commitment to privacy and transparency extends across all our domains and TLDs.

1. Scope and Trademark Protection

Nullstrasse trademark registration is currently undergoing through the World Intellectual Property Organization (WIPO). Upon completion of the registration process, this protection will apply to all domains and TLDs operated by Nullstrasse™, including but not limited to nullstrasse, nullstrasse.com, nullstrasse.de, and their subdomains. Unauthorized use of our trademark or registration of confusingly similar domain names is strictly prohibited and may result in legal action.

2. Data Transmission: User Responsibility and Vendor Documentation

When you visit any internet website, including those operated by Nullstrasse, your browser and operating system may automatically transmit certain technical data to the website's servers. This is a standard part of how the internet works, but the specific data transmitted depends on your browser, operating system configuration, network setup, and privacy settings.

It is your responsibility as a user to understand what data your browser, operating system, and network infrastructure transmit when you visit a website. We strongly recommend that you consult the official documentation provided by your browser, operating system, internet service provider, and any VPN or proxy service vendors for detailed information about data transmission, privacy settings, and consent management.

Major Browser Vendors

Browser	Legal Entity Name	Official Website
Edge	Microsoft Corporation	https://www.microsoft.com/edge
Safari	Apple Inc.	https://www.apple.com/safari/
Chrome	Google LLC	https://www.google.com/chrome/
Firefox	Mozilla Foundation	https://www.mozilla.org/firefox/

Major Operating System Vendors

Operating System	Legal Entity Name	Official Website
Windows	Microsoft Corporation	https://www.microsoft.com
macOS/iOS	Apple Inc.	https://www.apple.com

Please refer to your browser, operating system, internet service provider, VPN, and proxy service documentation for information on:

What data is transmitted (e.g., IP address, user agent)
How to manage privacy settings
How to control or limit data sharing
Network-level data handling and privacy protections

Note: The responsibility for obtaining user consent for data transmission prior to visiting a website lies with the browser, operating system, and network service providers. Nullstrasse does not control or influence the data your device or network infrastructure transmits automatically when you access our websites.

3. Data We May Automatically Receive

When you access our websites, we may receive certain technical data from your browser and device. The specific data we receive depends on your technology configuration, browser settings, and network setup. This may include:

IP Address: A unique number assigned to your device when you connect to the internet. Important: If you use a VPN or proxy service, we receive the IP address of your VPN or proxy server, not your actual device IP address. Please consult your internet service provider, VPN vendor, or proxy service provider for information about what IP address data they transmit to websites on your behalf. What is an IP address?
User Agent: Information about your browser type, version, and operating system, if transmitted by your browser. What is a user agent?
Other HTTP Headers: Such as language preferences, referrer information, and any cookies your browser chooses to send (see Cookie Policy section below).

This data, when received, is used for the technical operation of our websites, such as delivering content, ensuring security, and maintaining service quality.

We have no control or influence over third-party services (VPN providers, proxy services, internet service providers) that may modify, filter, or add to the data transmitted to our servers. Please contact these service providers directly for information about their data handling practices.

4. Cookies Policy

This website does not intentionally send or set any cookies on your device. However, we want to be transparent about cookie-related data handling:

Browser-Initiated Cookies: If you or another website/application creates cookies in your browser, and your browser automatically sends these cookies to our servers when you visit our site, we may receive and log this data as part of standard HTTP request processing.
Third-Party Cookie Control: We do not have full control or visibility over all cookies that may be stored on your device by other websites, browser extensions, or applications.
Your Control: Only you and your browser have full control and visibility over your cookie settings. You can manage, delete, or block cookies through your browser settings.
No Cookie Dependencies: Our website functionality does not depend on cookies, though we may log any cookie data your browser voluntarily transmits to us.

For information on managing cookies, please consult your browser vendor's documentation listed in Section 2.

5. Local Storage and Client-Side Data

JavaScript and Web Storage Technologies:

Our web applications may use JavaScript technology to enhance functionality and user experience. JavaScript is a programming language that runs in your browser and can interact with various browser storage mechanisms.

Local and Session Storage:

localStorage: Allows our web application to store data on your device that persists even after you close your browser
sessionStorage: Allows temporary storage of data for the duration of your browser session
Other Browser APIs: Various browser storage and caching mechanisms

Important Clarifications:

We do not have full visibility or full control over all data stored in your browser's local storage or session storage
Our web applications can use your local storage to save application-specific data, but this does not grant us visibility into other data you may store independently
We cannot control or modify your browser's local storage settings, size limits, or access permissions
The data stored locally by our applications remains under your device's control and is governed by your browser's security model

Your Responsibility:

You are responsible for managing your browser's storage settings and understanding what data is stored locally
Consult your browser vendor's documentation for details on storage management, privacy controls, and data security

For more information about browser storage, see MDN Web Storage API Documentation.

6. Additional Data You May Submit

In addition to the technical data that may be automatically transmitted, you may voluntarily provide additional information to Nullstrasse, for example:

Form Submissions: If you fill out a contact form or subscribe to a newsletter, the information you enter is transmitted to us
Uploaded Files or Attachments: Any files you choose to upload via our website
URL Query Strings: If you manually type a URL like https://nullstrasse/?q=Jane+Doe into your browser's address bar, or if you click on a hyperlink constructed by a third party (over which we have no control) that contains query parameters, these parameters (q=Jane+Doe) are sent to our server

Data Transmission Indicator:
Whenever you fill out a form or interact with a feature that transmits data to our servers, you will see this icon: .

Important Notes:

Data may be transmitted immediately (e.g., for autocomplete or live search features)
Data may be transmitted with a delay (e.g., after clicking "Submit")
If you close the app or browser before submitting, the data may not be sent at all
Do not rely on delays or browser/app closure as a way to control data submission—some features may transmit data automatically

Your Responsibility:
The burden of not sending unwanted or sensitive data via URLs, forms, or other means lies with you, the user. Please review your input before submitting any information to ensure you are not sharing data you wish to keep private.

7. Technical Details: How Browsers Send Data

When you visit a website, your browser typically performs the following steps:

DNS Resolution: The browser translates the website address (e.g., nullstrasse.com) into an IP address
TCP Connection: The browser establishes a connection to the server using the IP address
HTTP/HTTPS Requests: The browser sends a request to the server, which may include your IP address (or your VPN/proxy IP), user agent, and other headers. All Nullstrasse websites use HTTPS exclusively (see Section 10: Security and Encryption), so this data is always encrypted during transmission
Server Response: The server processes the request and sends back the requested content, which your browser displays

For more information, see:

8. Examples of Data We May Collect or Receive

Depending on your interaction with our website and your system configuration, we may collect or receive:

Search queries (e.g., via URL parameters)
Contact form details (name, email, message)
Newsletter subscription information
Technical logs (IP address or proxy/VPN IP address, user agent, access times)
Cookie data (only if your browser sends cookies to us - we do not set cookies ourselves, but may log any cookies your browser voluntarily transmits)
Local storage data (created by our JavaScript applications running on your device)

We do not collect any personal data beyond what you voluntarily provide, what is technically necessary for website operation, or what your browser/network infrastructure transmits to us automatically.

9. User Rights and Responsibilities

Your Responsibilities:

You are responsible for understanding and managing the data your browser, device, and network services transmit
Please consult your browser, OS, ISP, VPN, and proxy service documentation for privacy controls
Ensure any data you submit is accurate and does not contain information you wish to keep private
Manage your browser's local storage and cookie settings according to your preferences

Your Rights:

You have the right to know what personal data we process about you
You may request access to, correction of, or deletion of your personal data
You can withdraw consent for data processing where applicable under law

Consent:
By using our website, you acknowledge that your device and network infrastructure may transmit certain technical data as part of the normal operation of the internet, and that the control of such transmission lies primarily with your technology vendors and service providers.

10. Security and Encryption

TLS Encryption Standards:
This website uses HTTPS protocol and transmits data encrypted according to TLS 1.2 or TLS 1.3 protocol standards. For more information about TLS standards compliance, please refer to Guide to TLS Standards Compliance. To check which protocol version is being used, please refer to your browser's documentation listed in Section 2.

Certificate Fingerprint Verification:
It is your responsibility to verify the SSL/TLS certificate fingerprint when accessing our website. To check certificate fingerprints, please refer to your browser's documentation listed in Section 2. The correct SHA256 fingerprint for our certificate should be:

05:9E:1A:C0:6A:08:AF:AF:FC:29:58:74:5E:CE:F0:50:3B:E8:33:E3:AB:81:7A:E2:EA:FA:3B:66:A0:1A:97:8B

Critical Security Warning:

Some companies, network providers, educational institutions, or government entities may install custom root certificates on your device to perform Deep Packet Inspection (DPI) and execute man-in-the-middle (MITM) attacks to decrypt and monitor your supposedly secure HTTPS traffic.

Deep Packet Inspection is a network monitoring technique that examines the content of data packets as they pass through network checkpoints. Unlike basic packet filtering that only looks at headers, DPI analyzes the actual payload content of your communications.

Learn more: Deep Packet Inspection - Wikipedia

Man-in-the-Middle attacks occur when an attacker secretly intercepts and potentially alters communications between two parties who believe they are communicating directly with each other. In the context of HTTPS, this involves presenting a fraudulent certificate to decrypt your encrypted traffic.

Learn more: Man-in-the-Middle Attack - Wikipedia

If you visit this website and see a different certificate fingerprint or TLS protocol from what is stated in this Privacy Policy or no certificate at all, stop using this website immediately, report it to us as outlined in the Data Protection Officer Contact section below, and do not enter any private data.

11. Data Protection Officer (DPO) Contact

If you have questions about how we process your data or wish to exercise your rights under data protection law, please contact our Data Protection Officer:

Email: dpo@nullstrasse.com

12. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page indicates when the policy was last revised. Please review this policy periodically for any changes.

13. Additional Information

For more details about privacy, data protection, and your rights, please consult the following resources:

Thank you for trusting Nullstrasse. We are committed to transparency, user empowerment, and the responsible handling of your data.

This policy applies to all Nullstrasse domains, TLDs, and subdomains. For trademark protection and legal notices, see our Trademark Policy.