PRIVACY

Privacy policy

Last updated: 9 October 2026.

1. Who is responsible

This notice covers our company website at mq.sc and munichquantum.software, and its password-protected team preview. TheMQSF privacy notice covers event registration and participation separately.

2. Website requests

When you visit the website, your browser sends an IP address and technical request data to the server. This can include the requested page, access time, browser information, referring page and response status. We use this data to deliver the website, diagnose errors and protect the service from misuse.

The legal basis is Article 6(1)(f) GDPR: our legitimate interest in operating a secure, reliable website. Technical request data is needed to deliver the requested content. It is not used for visitor profiling.

The website and its team preview use an IONOS server in Germany. Its nginx access and error logs rotate daily when non-empty, retaining up to 14 rotated files. Quiet periods can extend their calendar retention.

The team preview also checks a shared username and password to restrict access. Your browser can keep this HTTP authentication active during its session. The shared username may appear in access logs.

3. Cookies, browser storage, and optional features

We use no visitor analytics or advertising trackers. Our own website does not set cookies. Fonts and images are served from our server. Optional browser storage and embedded YouTube videos are off until you consent.

The footer’s “Privacy settings” lets you choose each optional feature or reject both. We store your choice, its expiry, and the notice version in your browser’s local storage under mqsc:privacy for six months. This record is needed to respect your settings and is not sent to our server. It contains no visitor identifier. After expiry, optional features stay off until you choose again. Choices apply separately to each website address and browser.

If you allow “Remember my preferences”, we save your selected color mode under mqsc:theme in local storage. We also save the current page address and scroll position under mqsc:reload-scroll in your tab’s session storage, replacing the previous position on each save. Session storage lasts for the tab’s session, which your browser may restore when reopening tabs. Neither record is sent to our server. Without permission, the website follows your device’s color mode, allows changes for the current page, and uses the browser’s own scroll restoration.

Selecting “Watch the Recap” first asks whether to load YouTube’s privacy-enhanced player. “Load & remember” allows playback and saves your video permission for six months, without changing your saved-preferences choice. You can also allow or withdraw video permission through “Allow YouTube videos” in the footer settings. The player loads only when you request playback; until then, no connection to YouTube is made. Loading it sends your IP address and other technical data to YouTube/Google and may use browser storage. Following the separate “Watch on YouTube” link opens YouTube’s own website.

For users in the European Economic Area, Google identifies Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the controller. Data may be processed outside the European Economic Area, including in the United States. Google describes its use of adequacy decisions and, where required, standard contractual clauses in its data-transfer frameworks. Details of Google’s processing and your options are in Google’s privacy policy.

Optional storage and access rely on your consent under § 25(1) TDDDG and, where personal data is processed, Article 6(1)(a) GDPR. Storing the privacy choice itself serves the settings you request under § 25(2)(2) TDDDG and our legitimate interest in respecting those settings under Article 6(1)(f) GDPR. You can withdraw consent at any time in the footer. Withdrawal stops an active embedded video and clears our optional preference records. Expired records are removed when you next visit, or while the page is open. Withdrawal does not affect earlier lawful processing or erase data already held by Google. Closing the video removes the player but keeps your saved permission for later playback requests.

If browser storage is unavailable, choices apply to the current page only. Clearing browser storage also resets your settings. You can use the website without allowing either optional feature.

4. Product illustrations and statistics

The product illustrations run in your browser. They do not send quantum programs or simulation requests to our server or hardware providers.

The page retrieves aggregate MQT project statistics from our server. Our server refreshes these figures from the public MQT Dashboard; your browser does not contact that service. Requests to our server are covered by the website-request processing described above.

5. Email inquiries

If you email us, we use your address, message and any details you provide to respond. For contract-related inquiries, the legal basis is Article 6(1)(b) GDPR. For other inquiries, Article 6(1)(f) GDPR applies to our legitimate interest in handling business correspondence.

We keep correspondence for as long as needed to handle the inquiry and any resulting business relationship. Legal retention duties and the need to establish, exercise or defend legal claims can require longer storage.

6. Service providers and external links

We use IONOS for hosting and Microsoft 365 for email. These providers may process data on our behalf. Other recipients can include advisors or authorities where required to meet a legal obligation or handle a legal claim. External websites, including GitHub and LinkedIn, apply their own privacy notices when you follow a link.

7. Your rights

Subject to the conditions in the GDPR, you can request access, correction, erasure, restriction of processing and data portability. You can object to processing based on legitimate interests on grounds relating to your situation. Where processing relies on consent, you can withdraw it for the future. Contact contact@mq.sc to exercise these rights. We do not make automated decisions about you or profile you through this website.

You can complain to a data protection authority. The authority for private companies in Bavaria is theBavarian State Office for Data Protection Supervision (BayLDA). You may also contact another competent authority.