W
Wyrmhost.net
{{ ctaLabel }}

Glacial
Infrastructure

Hosting consultation with cold-blooded precision — from web platforms to AI inference, GPU self-hosting, MLOps and fine-tuning. The right way to host, at the right cost, fully compliant.

{{ ctaLabel }}
Based in Germany · GDPR-native
Working relations with
IBMRed HatJFrog
Crystalline ice wyrm coiled around a glowing glacial sphere

We are specialists in hosting consultation, guiding teams from their first web deployment to self-hosted GPU clusters — with cost, compliance and governance built in from day one.

icon
{{ svc.title }}
{{ svc.desc }}
Talk with us
How we work
{{ step.num }}
{{ step.title }}
{{ step.desc }}

Compliance
we live by

Hosting decisions are governance decisions. We map every architecture against the frameworks that matter for your market — and host where it makes sense, including Germany-only or EU-only footprints when data residency demands it.

{{ fw.name }}
{{ fw.note }}
Audit-ready architecture reviews
Frosted ice shield with circuit traces
EU AI Act & NIS 2 readiness
Risk classification, logging & incident-reporting obligations for AI workloads.

We've helped teams cut the cost of hosting and fine-tuning AI without cutting corners on governance.

Our case studies
{{ st.value }}{{ st.unit }}
{{ st.label }}

Let the wyrm
guard your stack.

One conversation is enough to know where your hosting money is melting away.

{{ ctaLabel }}
Legal information

Privacy Policy

Last updated: 15 August 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

{{ legalName }}
Germany
Email: {{ contactAddress }}

2. Website access and server logs

When you access this website, technically necessary data is processed. This may include, in particular, your IP address, the date and time of access, the requested file or URL, referrer URL, browser type and version, operating system, hostname, HTTP status code, and amount of data transferred.

This processing is carried out to deliver the website, ensure its stability and security, and prevent misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of this website.

Access logs, WAF logs, and security-event logs on the origin server are retained for 14 days and are then deleted, unless statutory retention or preservation in connection with a specific security incident is required.

3. Hosting by IP-Projects

The origin server for this website is operated in German data centres by IP-Projects GmbH & Co. KG, Am Vogelherd 14, 97295 Waldbrunn, Germany. IP-Projects processes the connection and log data required to deliver and securely operate the website on our behalf. The legal basis is Article 6(1)(f) GDPR; processing on our behalf is governed by Article 28 GDPR.

Log files are stored so that the customer can create statistics. IP-Projects evaluates these log files solely to provide the customer with centrally prepared and aggregated statistics in accordance with the customer information. Any further storage or use by IP-Projects or third parties is excluded.

Further information: IP-Projects privacy information.

4. Cloudflare

We use services provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, in particular for DNS, content delivery, TLS encryption, and protection against abusive access. Connections to this website therefore first pass through Cloudflare's global network. Cloudflare may process IP addresses, routing and system information, and information about network traffic.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the fast, reliable, and attack-resistant delivery of the website. Where Cloudflare processes data on our behalf, an agreement under Article 28 GDPR applies. According to Cloudflare, transfers to the United States rely on its certification under the EU-US Data Privacy Framework and, additionally, on the EU Standard Contractual Clauses.

Cloudflare security and Web Application Firewall (WAF) events are retained for 14 days and are then deleted, unless they must be preserved in connection with a specific security incident or due to a statutory obligation.

Further information: Cloudflare Privacy Policy.

5. CrowdSec

IP addresses are forwarded to CrowdSec for security analysis and to detect and block attacks. This processing is based on Article 6(1)(f) GDPR. Our legitimate interest is protecting the website and its infrastructure against abusive access and other attacks.

6. Externally loaded fonts and scripts

This website loads fonts through the Google Fonts Web API provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. According to Google, this transmits your IP address, the requested URL, browser and operating-system information, and the referrer URL. Google states that Google Fonts does not set cookies and does not use this information for personalised advertising.

The React and ReactDOM libraries required to render this website are also loaded through UNPKG. UNPKG is a public, open-source CDN that delivers files through Cloudflare's global network. Technically necessary connection data, particularly the IP address and HTTP headers, is therefore transmitted to UNPKG and Cloudflare.

The legal basis in each case is Article 6(1)(f) GDPR. Our legitimate interest lies in the consistent and technically reliable presentation of this website. According to Google, transfers to the United States rely on the EU-US Data Privacy Framework and, where required, the EU Standard Contractual Clauses.

Further information: Google Fonts privacy information, Google Privacy Policy and information about UNPKG.

7. Cookies and similar technologies

This website itself does not use analytics, marketing, or profiling cookies and does not use a web analytics tool. Depending on the security features enabled, Cloudflare may set technically necessary cookies to identify automated or abusive access and protect the website. Where such cookies are used, access to your device is based on Section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG); subsequent data processing is based on Article 6(1)(f) GDPR. For this reason, no consent banner is currently used.

8. Contact by email

If you contact us by email, we process the information you provide to respond to your enquiry and any follow-up questions. The legal basis is Article 6(1)(b) GDPR where the enquiry concerns entering into or performing a contract; otherwise, it is Article 6(1)(f) GDPR. Our legitimate interest is the appropriate handling of your enquiry. The data is deleted once the enquiry has been finally resolved, unless statutory retention obligations or overriding legitimate grounds require otherwise.

9. Recipients and transfers to third countries

Recipients of personal data are limited to the technical service providers named above and, where applicable, other recipients where disclosure is required by law. Data may be transferred to countries outside the European Economic Area in connection with Cloudflare, Google, or UNPKG. The safeguards used are described in the relevant sections above.

10. Your rights

Subject to the statutory requirements, you have the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), and data portability (Article 20 GDPR). You may withdraw consent at any time with effect for the future (Article 7(3) GDPR).

Right to object: Where we process your data on the basis of Article 6(1)(f) GDPR, you may object to that processing at any time on grounds relating to your particular situation (Article 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR), in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement.

11. Requirement to provide data and automated decisions

You are not legally or contractually required to provide personal data merely to visit this website. However, the website cannot be retrieved without the technically necessary connection data. No automated decision-making, including profiling, takes place.