Privacy Policy

Data Protection

The operator of these pages takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations (in particular the GDPR) and this privacy policy.

Information about the Responsible Party

The responsible party (the "controller") for data processing on this website is:

Data Protection Officer

A Data Protection Officer is not legally required for our company and has not been appointed.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority responsible for us is generally the:

Your Other Rights

You have the right to rectification (Art. 16 GDPR), erasure ('right to be forgotten') (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR). For any of these requests, please contact us at the email address above.

Server Log Files

Our hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of the website.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. The processing of this data is based on Art. 6 para. 1 lit. b GDPR, as it relates to pre-contractual measures.

Hosting with Vercel

We host our website and service with Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. The use of Vercel involves the transfer of personal data to the USA. This transfer is legally secured by Vercel Inc.'s certification under the EU-U.S. Data Privacy Framework (DPF), which establishes an adequate level of data protection recognized by the European Commission (Art. 45 GDPR). Vercel is also ISO 27001 certified.

Authentication with Clerk

For user authentication and account management, we use the service provided by Clerk, Inc., 2093 Philadelphia Pike #3950, Claymont, DE 19703, USA. Clerk processes your email address and authentication data to fulfill our service contract with you (Art. 6 para. 1 lit. b GDPR). The transfer of personal data to the USA is secured by Clerk, Inc.'s certification under the EU-U.S. Data Privacy Framework (DPF) (Art. 45 GDPR).

Database with Supabase

For our application database, we use the service Supabase provided by Supabase, Inc., 970 Terra Bella Ave, Mountain View, CA 94043, USA. This processing is necessary to provide the core functionality of our service and fulfill our contract with you (Art. 6 para. 1 lit. b GDPR). To ensure the highest level of data protection, our database is hosted exclusively within the European Union (Frankfurt, Germany). As Supabase, Inc. is a US-based company, we have concluded a Data Processing Agreement (DPA) that incorporates the EU's Standard Contractual Clauses (SCCs) to legally safeguard any potential data access from the US, in accordance with Art. 46 GDPR.

Plausible Analytics

We use Plausible Analytics, a privacy-focused analytics service from Plausible Insights OÜ, Västriku 2, 50403 Tartu, Estonia. Plausible is designed to be GDPR compliant without the need for cookies or collection of personal data. It collects aggregated and anonymized data about website usage, such as page views, referrers, and general location data.

Since Plausible is EU-based and privacy-focused, no individual user tracking occurs. The legal basis for using this service is our legitimate interest in understanding website traffic to improve our service (Art. 6 para. 1 lit. f GDPR).