Information on data protection

The GDPR (General Data Protection Regulation) was adopted by the European Parliament in April 2016. It officially came into force on May 25, 2018 and applies to all companies - without exception - that use personal data of European citizens.

We at® take this regulation very seriously and have therefore decided not to store any personal data at all.

Lock icon

Data protection is our top priority

Company with headquarters & hosting in Germany

Varify GmbH is based in Grünwald near Munich. The hosting takes place on AWS servers with the server location Germany. 

Privacy first® does not store or process any personal data itself. In contrast to other A/B testing platforms,® does not have its own tracking, which is why it is not necessary to process personal data.

No cookies

In principle, no cookies are set.® uses local storage or session storage so that test participants can be reliably assigned to the variant they have already seen. This can be configured in the application.

Data processing agreement (DPA)

Despite the fact that® itself does not store any data, AWS is used for hosting and Cloudflare is used as a sub-processor for the stable delivery of the variants. Both are technically necessary. Under the GDPR, data is already processed when the IP address is transmitted. Accordingly,® provides an order processing contract including the appendix of the technical organizational measures (TOMs) taken for download.