top of page

Privacy Policy


We, Curve UG (haftungsbeschränkt), operate the website and collect certain data from our visitors and customers as necessary. In the following privacy policy, you will learn what we do with your data, so-called personal data, and why we do this. We will also tell you how we protect your data, when the data will be deleted and what rights you have thanks to data protection.

In addition to the data processing on our website, we explain in this Privacy Policy the data processing in the services and apps we offer ("Code Pirate Services") for which our customers can register.

You will learn in this Privacy Policy:

  • What data the Code Pirate Services collect and what we do with it.

  • What technologies we use for delivery and personalization.

  • What advertising services we use.

  • What your privacy rights are and how you can exercise them.

Important note: We want to provide you with an innovative and effective learning experience. Therefore, we are constantly working to improve the Code Pirate services. Therefore, we need to update this privacy policy from time to time so that you can always access the latest information here.


Whom can I contact?

Responsible for this website is:


Curve UG (limited liability)

Graf-Johann-Weg 14

22459 Hamburg


You can also use these contact details to reach our data protection officer or any other data protection-related contact. Please contact us at any time if you have specific questions about your data, its deletion or your rights.


What are my rights?

You may contact us at any time if you have questions about your rights or wish to exercise your rights below:

  • Right of withdrawal according to Art. 7 para. 3 DSGVO (e.g. you can contact us if you want to cancel a previously given consent to a newsletter)

  • Recht auf Auskunft gem. Art. 15 DSGVO (z.B. kannst du dich an uns wenden, falls du wissen möchtest, welche Daten wir in Bezug auf dich gespeichert haben)

  • Correction according to Art. 16 DSGVO (e.g. you can contact us if your email address has changed and you want us to replace the old email address)

  • Deletion according to Art. 17 DSGVO (e.g. you can contact us if you want us to delete certain data that we have stored in relation to you)

  • Restriction of processing according to Art. 18 DSGVO (e.g. you can contact us if you would like us not to delete your email address but only to use it for sending absolutely necessary emails)

  • Data portability according to Art. 20 DSGVO (e.g. you can contact us to receive your data stored with us in a compressed format, e.g. because you want to make the data available to another website)

  • Objection according to Art. 21 DSGVO (e.g. you can contact us if you do not agree with one of the advertising or analysis procedures specified here)

  • Right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 (1) DSGVO (e.g. you can also address complaints directly to the data protection supervisory authority in your federal state)


Deletion of data and storage period

Unless otherwise stated, we will delete your data as soon as it is no longer required. Your data will also be blocked or deleted if a storage period prescribed by law expires, unless there is a need to continue storing the data for the conclusion or performance of a contract. Certain data may have to be stored longer for legal reasons. You can, of course, request information about the stored data at any time.


Visit the website

If you merely want to browse our website, we do not collect any personal data, with the exception of the data that your browser transmits to enable you to visit the website, first and foremost:

  • File names of the accessed pages and files

  • Date and time of the call

  • amount of data transferred

  • Status messages (i.e. whether the data transfer was successful)

  • information about your device (e.g. browser version, app version, operating system, language settings, device identifiers)

  • the previously visited page (if you accessed our website via a link)

  • Online identifiers (e.g. IP address, session IDs, cookies, device identifiers)

  • Geo data (e.g. city, postal code) (transmitted via the IP address)

As a protective measure in favor of your privacy, we delete or anonymize the IP address after specified periods. Thus, the other possibly associated data can no longer be traced back to you and only serve anonymous, statistical purposes for the optimization of our website. The purpose of the temporary storage of the data is, on the one hand, the technical necessity for establishing the connection and the correct and error-free display of our website. The IP address and the technical data already mentioned are necessary to display the website, to prevent display problems for visitors and to correct error messages. The legal basis is the so-called legitimate interest, which has been examined in the context of the aforementioned protective measures and in accordance with the European data protection requirements from Art. 6 (1) p. 1 lit. f DSGVO.


Provision of Code Pirate services

We process your data to the extent necessary in each case for the performance of the contract and for the purpose of providing and carrying out other services requested by you, as described in this Privacy Policy. This also includes

  • the provision, personalization, and customized design of our Code Pirate Services (including the respective websites, apps, and cross-device features),

  • ensuring the general security, operability and stability of our services, including the defense against attacks,

  • die nicht-werbliche Kommunikation mit dir zu technischen, sicherheits- und vertragsrelevanten Themen (z.B. Betrugswarnungen, Konto-Sperrung oder Vertragsänderungen) und

  • the implementation of promotions and sweepstakes.

If the purpose is the execution of a contract agreed with you or the provision of a service requested by you, the legal basis is Art. 6 para. 1 p. 1 lit. b DSGVO. Otherwise, the legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO, whereby our legitimate interests lie in the above-mentioned purposes.


Your Code Pirate account

Using our Code Pirate programming tutorials requires registration on our website/app. When you register with us, we collect and store the basic data you enter, such as your email address and password, as required fields as part of the registration process. We may receive further information from you about the website or app, which you store, for example, in your personal profile).

As a protective measure, the transmission of the data you enter - just like the visit to the rest of the website - takes place via an encrypted connection. After successful confirmation, your data will be stored until you decide to delete individual data or the entire user account. The purpose of the requested data is the creation of a user account for the use of extended functions on the website. Registration is voluntary and can be revoked or the user data deleted at any time. The legal basis is your consent in accordance with the European data protection requirements from Art. 6 para. 1 p. 1 lit. a DSGVO.



You can contact us in different ways on our website or in our app. You can contact us by leaving a message for our customer service. In this context, we process data exclusively for the purpose of communicating with you. The legal basis for the data processing is the fulfillment of the contract according to Art. 6 para. 1 p. 1 lit. b DSGVO.


Personal learning progress

So that Code Pirate users can conveniently access their individual learning progress at any time, all completed exercises are saved. This data is not visible to other users. The legal basis for the data processing is the fulfillment of the contract according to Art. 6 para. 1 p. 1 lit. b DSGVO.


Research, artificial intelligence and machine learning

We process data collected about our customers for scientific research in areas relevant to Code Pirate. These are in particular the research areas of machine learning, artificial intelligence, processing of programs, program sections, and deep learning, as well as efficiency of online learning methods. Code Pirate research focuses on solving programming tasks and is intended to improve and further develop the existing service offering. Of course, we observe the recognized scientific data protection standards. This also means that we only process your data in aggregated, anonymized or pseudonymized form for research purposes, for example by replacing all identifiable data such as your name with other information.

Research at Code Pirate includes the following purposes:

  • Developing machine learning techniques that provide estimation, forecasting, and analysis of our users' needs and interests.

  • Developing technical solutions to real customer problems that our customer service faces in everyday business.

  • Developing technical solutions to evolve and improve the user experience and prevent fraud.

The legal basis for processing your data in the context of the research purposes described above is Art. 6 para. 1 p.1 lit. f DSGVO, whereby our legitimate interests lie in the above-mentioned purposes.


Social Sign-In & Social Login

In addition to manual registration, we offer you the option of registering directly with us using your existing user account of a social network from selected providers. We use the platforms Facebook, Google and Apple. If you want to use one of these functions, you will be redirected to the page of the respective provider and navigated through the registration process.

As a protective measure, the data you enter is transmitted via an encrypted connection of the respective platform. We do not use the registration to access personal data such as friend lists or contacts or to store them for our own purposes. A permanent link between your user account and the user account at Facebook, Google and Apple does not take place. We do not know what data the social networks collect in the course of registration or how data is linked. Further details can be found in the privacy policy of Facebook, Google and Apple. The purpose of the requested data is the registration via an existing user account for the use of extended functions on the website. Registration via the social networks is voluntary and can be revoked or the user account can be deregistered at any time. The legal basis is your consent in accordance with the European data protection requirements from Art. 6 para. 1 p. 1 lit. a DSGVO.


Newsletter and promotional emails

If you are interested in news regarding our company or our products, you can subscribe to our newsletter. You can unsubscribe from the newsletter at any time. For this purpose, you will find a corresponding unsubscribe link in every email of our newsletter. 

You have the possibility to unsubscribe from the newsletter at any time and thus delete your email address from the database. The purpose of the data collection is the delivery of the newsletter to your personal email address in order to comply with your wish to receive news about our company or our products. The legal basis is your consent in accordance with the European data protection requirements from Art. 6 para. 1 p. 1 lit. a DSGVO.

If you register for our Code Pirate services, we will also send you promotional emails (existing customer advertising). You can object to the promotional use of your data at any time by sending an email to or in the account settings of your Code Pirate customer account (accessed via a web browser) (Statement of advertising objection). A corresponding unsubscribe link can also be found in every advertising email. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. f DSGVO, based on our legitimate interest in promoting our products and services.

We use standard market technologies in our advertising emails that can be used to measure interactions with the advertising emails (e.g. opening of the e-mail, links clicked). We use this data in pseudonymized form for general statistical evaluations and for the optimization and further development of our content and customer communication. This is done with the help of small graphics embedded in the newsletters (so-called pixels). The data is collected exclusively pseudonymously and is not linked to your other personal data. The legal basis for this is our aforementioned legitimate interest pursuant to Art. 6 (1) p. 1 lit. f DSGVO. We want to share content relevant to you via our advertising emails and better understand what you are actually interested in. If you do not want the analysis of your usage behavior, you can unsubscribe from the promotional emails or deactivate graphics in your email program by default. The data about your interaction with our promotional emails is stored pseudonymously to improve deliverability and to correct technical deficiencies, and then completely anonymized.



In addition to our website, we also offer applications ("apps") for various smartphone operating systems. For the purpose of error detection and correction and to improve our apps, we collect data on the use of the app by means of third-party software. However, no data is collected from which a third-party provider could directly establish a personal reference. We thus receive aggregated information about how the apps are used, which features are particularly popular and can draw conclusions about future improvements in product development. In addition, we are informed about app crashes - if you have allowed this through your device settings. These so-called "crash reports" are carried out via third-party providers. However, no data is processed from which a third-party provider could derive a personal reference.

Invite friends

We offer you the possibility to invite friends to Code Pirate on our website. For this purpose we cooperate with the company Talkable ( ). In order to invite friends, their

  • First name and

  • e-mail address must be entered. A personal link will then be created which can be sent to the invited friend.

We have concluded an order processing agreement with Talkable that complies with the requirements of Art. 28 DSGVO.


Our website sometimes uses so-called cookies. Cookies are small text files that are usually stored in a folder of your browser. Cookies contain information about the current or last visit to the website:

  • Website name

  • Cookie expiration date

  • Any value

If cookies do not contain an exact expiration date, they are only temporarily stored and automatically deleted as soon as you close your browser or restart the terminal device. Cookies with an expiration date remain stored even if you close your browser or restart the end device. Such cookies will only be removed on the specified date or when you delete them manually.

We use the following three types of cookies on our website:

  • Required cookies (we need these, e.g. to display the website correctly for you and to temporarily store certain settings)

  • Functional and performance-related cookies (these help us to evaluate e.g. technical data of your visit and thus avoid error messages)

  • Advertising and analytics cookies (these ensure that, for example, advertisements for shoes are displayed if you have previously searched for shoes)

You can configure, block and delete cookies in your browser settings. If you delete all cookies from our website, some functions of the website may not be displayed correctly. 

With the exception of the technically necessary cookies, the other types of cookies will only be activated after you have given your explicit consent. This consent can be revoked at any time. The revocation option and further information can be found in the cookie settings.



We use the provider YouTube to integrate videos. YouTube is operated by YouTube LLC with headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. with headquarters at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. When playing the embedded videos, a connection to the YouTube servers is established and, for technical reasons, at least your IP address is transmitted. If you are also logged into your user account at YouTube, YouTube assigns e.g. information about the accessed videos to your personal user account. You can prevent this assignment by logging out of your YouTube user account and other user accounts of the Google platform before using our website.

The high security standards of the Google platform and the associated privacy policy of Google ( apply as protective measures. The purpose of the data transfer is the integration of the video offer of YouTube, which is popular among our users, in order to be able to comfortably access the videos displayed without leaving our website. The legal basis is your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO.


Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses the advertising and analysis cookies described above to analyze our website with regard to your usage behavior. The information generated by cookies about your use of this website will be transmitted to and stored by Google on servers in the United States. However, your IP address will be shortened before the usage statistics are analyzed so that no conclusions can be drawn about your person. For this purpose, Google Analytics on our website has been extended by the code "anonymizeIp" to ensure an anonymized collection of IP addresses. Google will use the anonymized information obtained by the cookies to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

As a protective measure, we use the anonymization procedure offered by Google, whereby a subsequent evaluation of the data is not based on your person, but only on a statistical basis. In addition, the high security standards of the Google platform and the associated privacy policy of Google ( apply. We have also concluded a special order processing agreement with Google, which stipulates the protection of your data through technical and organizational protective measures. Since Google is based in the USA and thus a so-called third country, further guarantees are required to ensure an adequate European level of data protection. To this end, we have concluded the so-called EU standard contractual clauses with Google and taken further measures to protect personal data. The purpose of using Google Analytics is the anonymized analysis of your usage behavior on our websites. The insights gained from this help us to improve our services. The legal basis is your consent pursuant to Art. 6 (1) sentence 1 lit. a DSGVO.


Google Conversion Tracking

We use Google Conversion Tracking of Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA on our website to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. In doing so, Google Adwords sets a cookie on your computer if you have accessed our website via a Google ad.

If the user visits certain pages of the AdWords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page.

Each AdWords customer receives a different cookie. Cookies can therefore not be tracked across AdWords customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. We learn the total number of users who clicked on an ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users. The legal basis for the use is your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO, which can be declared within our cookie banner. The consent can be revoked at any time via the cookie administration.


Google Firebase

Google Firebase is a service provided by Google Inc, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").

We use Google Firebase to host data and files. This is necessary for our services to be used. We use this service on the basis of the fulfillment of our services and performance of our services (i.e. performance of a platform within the meaning of Art. 6 para. 1 lit. b DSGVO and Art. 6 para. 1 lit. c DSGVO) and our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO).

This service operates with geographically distributed servers, so it is difficult to determine the location where the personal data is stored. However, we use servers with a location within the EU whenever possible. However, it cannot be ruled out that data may also be transferred to the USA.

For more information about Google Firebase and data protection, please see Google's privacy policy (


Online advertising

In addition to our general usage analytics insights, we - like the many other companies - use common tools from other vendors to optimize our online advertising outside of the Code Pirate services. By optimization, we mean that we want to target our advertising (e.g., ads on Facebook and Twitter, in Google search results, or on other websites that provide your ad space through an ad network) as closely as possible to people who might actually be interested in our offerings ("personalization"). For example, personalization allows us to avoid displaying ads for a free trial course to our active Code Pirate users on other sites. However, personalized advertising also allows us to tailor our advertisements to the interests of other users who have not previously engaged with Code Pirate.

For this purpose, the Code Pirate services, just like the services (in particular websites, apps) of other companies that participate in the same advertising networks as we do (e.g. Google advertising network), contain special cookies or comparable technologies (e.g. pixel processes) that are set by the respective providers and send them certain access data when these services are used. Based on this data, the respective providers can create a usage profile to determine which websites and apps you use and derive your interests from this (your IP address is only transmitted for technical reasons, but not used for personalization). With this data, the operator of an advertising network can then show you personalized ads on all advertising spaces connected to its advertising network. For example, if you search for Python programming courses on Google, Google can use this information to show you our ads for a Python course on another site that is also connected to the Google ad network. And because we participate in the Facebook advertising network, we can, for example, tell Facebook to display our Facebook Ads only to Facebook members who have visited our website in the last month.


Social Plugins

Our website uses a plug-in of the provider ShareThis, Inc., 4009 Miranda Avenue, Suite 200, Palo Alto, CA 94304, USA ("ShareThis") with which you can share content in social media platforms.

If you visit a page of our website in which such a plug-in is embedded, your browser establishes a direct connection to the servers of ShareThis and to the social networks listed below. The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO, based on our legitimate interest that you share our content via social networks and that we thereby increase our reach.

This informs ShareThis that your browser has accessed the corresponding page of our website and stores a cookie on your device to identify your browser. This information is transmitted from your browser to a ShareThis server in the USA and stored there. ShareThis uses the data to create anonymous user profiles, which serve as a basis for interest-based advertising targeting of visitors to websites with ShareThis plugins. ShareThis has submitted to the EU-U.S. Privacy Shield (a certification program to ensure an adequate level of data protection when transferring personal data outside the EU).

You can object to the collection of data by ShareThis for the future by setting a so-called opt-out cookie. To do this, you can select the "Click here to Opt-Out" button in the ShareThis privacy policy.

Via ShareThis, data connections to social networks can be established. In this case, the social network receives the information that you have accessed the corresponding page of our website or content of a page. If you are logged in to the social network, it can assign the visit to your account. If you do not want social networks to collect data about you via our website, you must log out of these networks before visiting our website. However, even if you are not logged into the network, websites with social media plug-ins can send data to social networks via a cookie. To prevent this, you can select the "Block third-party cookies" function in your browser settings.

Our app allows you to share content using the standard features of your mobile device via other services, such as email or social networks whose apps you have installed. Only when you actually tap the share function is the data transferred to the operating system of your mobile device and from there to the respective app (e.g. Twitter, Facebook, email program). Further processing of the data can be found in the privacy statements of the respective apps.

The purpose and scope of the data collection and the further processing and use of the data by social networks, as well as your rights in this regard and setting options for protecting your privacy, can be found in the privacy notices of the respective networks:

  • Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA, Privacy Policy.

  • Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA, Privacy Policy.

  • Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA, Privacy Policy.

  • Instagram LLC, 1601 Willow Rd., Menlo Park CA 94025, USA, Privacy Policy.

  • YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, Privacy Policy.


When is data shared?

A passing on of the data collected by us takes place in principle only if:

  • you have given your express consent to this in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO,

  • the disclosure is necessary for the assertion, exercise or defense of legal claims pursuant to Art. 6 (1) p. 1 lit. f DSGVO and there is no reason to assume that you have an overriding legitimate interest in not having your data disclosed,

  • we are legally obligated to disclose data according to Art. 6 para. 1 p. 1 lit. c DSGVO or

  • it  is legally permissible and required according to Art. 6 para. 1 p. 1 lit. b DSGVO for the processing of contractual relationships with you or for the implementation of pre-contractual measures, which take place upon your request.

In addition, disclosure may occur in connection with government inquiries, court orders and legal proceedings when necessary for law enforcement or prosecution.


Payment service provider

We use payment service providers. Depending on which payment method you select in the ordering process, the payment service providers commissioned by Code Pirate collect the data for payment processing themselves under their own responsibility (e.g. bank details or credit card data). In this respect, the privacy policy of the respective payment service provider applies.


Data security

Code Pirate works with security measures to ensure protection against loss, alteration or misuse of your data. For this purpose, Code Pirate works with constantly updated industry-standard firewalls and other security systems. At the same time, the user should be aware of the fact that due to constantly emerging viruses and other means of attacking secured data systems of Internet services, 100% protection against attacks cannot be guaranteed. Code Pirate will pursue any discovered attack by hackers and the like under civil and criminal law and will inform the user of any compromise of his data.


Privacy Policy Status: January 2022

bottom of page