Privacy policy

grokbots.de processes as little personal data as possible. There is no tracking, no advertising and no embedded third-party content. This is a translation for your convenience; the German version is legally binding.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Sebastian Klösel
Soestweg 36
59514 Welver
Germany
Email: sebastian@nextcoding.de

grokbots.de is a private, independent community project and is not affiliated with X Corp or xAI.

2. Hosting and server log files

The website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany. A data processing agreement under Art. 28 GDPR is in place with the host.

Each time a page is requested, the server processes technically necessary data: IP address, date and time, requested address, amount of data transferred, referrer, and browser and operating system. This data is stored in server log files to deliver the website, keep it secure and find errors. It is not combined with other data. How long log files are kept is determined by the host.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and stable operation of the website.

3. Cookies and browser storage

We only set cookies and storage entries that are needed for a feature you trigger yourself. That is why there is no cookie banner. The legal basis is Section 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act).

The website is available in German and English. With every request your browser tells us which language you prefer. On your first visit we send you to the matching version. We do not store this information. If you choose the language yourself with the switch at the top, we remember your choice in the gb_lang cookie.

Name	Type	Purpose	Duration
`theme`	Browser storage (localStorage)	Remembers light or dark mode after you use the switch.	until you delete it in your browser
`gb_lang`	Cookie	Remembers the language after you use the switch.	1 year
`gb_voter`	Cookie	Random ID so that only one vote per browser and bot counts. Only set when you vote.	1 year
`gb_admin`	Cookie	Login to the admin area. Only concerns the operator.	until the browser is closed, at most 8 hours

You can delete cookies and storage entries in your browser at any time. The site works without them. Only voting requires the gb_voter cookie.

4. Ratings (thumbs up and down)

When you rate a bot, we store in our database: the bot, your rating, the time, the ID from the gb_voter cookie and your IP address. We do not store the ID and IP address in plain text, only as an irreversible hash value.

This ensures that only one vote per browser counts and limits multiple votes from the same network. We remove the hash of the IP address after 30 days. The rating itself remains stored without reference to you until you withdraw it. Only the number of votes is published.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a fair rating protected against manipulation.

5. Submitting bots, plugins and skills

You can send us a contribution via the form under Submit. We then store:

the details of the contribution: type, name, short description, share link, notes, prompt or instructions,
your name or alias and, if provided, your X username,
your email address for questions,
the time and a hash of your IP address to limit spam (at most 5 submissions per hour).

We are notified of every new submission by email. The notification contains the details of the contribution, your name and your email address.

If your contribution is accepted, we publish the name, description, link and your name or alias and, if provided, your X username with a link to your profile. Your email address is never published.

The legal basis for publication is your consent under Art. 6(1)(a) GDPR, which you give by submitting. You can withdraw it at any time by email; we will then remove the contribution. All other processing is based on Art. 6(1)(f) GDPR, our interest in reviewing contributions and asking questions.

We automatically delete stored submissions 6 months after our decision to accept or reject them. Published contributions stay on the website until you ask for their removal.

6. External links and sharing

The website links to other services, mainly to the bot pages at x.ai/bot/…, to profiles on X and to the catalogs the bot list comes from. The share buttons are plain links to X, Bluesky, Mastodon, LinkedIn, WhatsApp and Reddit.

As long as you do not click any of these links, no data is transferred to these providers. Only when you open a link do that provider’s privacy terms apply.

7. Fonts and content

All fonts, images and scripts are loaded from our own server. No content from Google Fonts, content delivery networks or analytics services is embedded.

We take the list of bots from public catalogs. It contains the publicly stated names of the authors and links to their profiles. We have the short descriptions machine-translated into German; for this we only send these public texts to DeepSeek, no visitor data. Learn more under Sources. Authors can ask for their entry to be corrected or removed.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)).

Simply write to sebastian@nextcoding.de.

You can also lodge a complaint with a data protection supervisory authority, for example the authority responsible for us, the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

9. Changes

We update this policy when the website or the law changes. Last updated: October 2026.