Privacy Policy

1. Data Controller

The responsible party for data processing on this website is:

Philipp Gabriel

Volpinistr. 30, 80638 Munich, Germany

2. Hosting

This website is hosted on Amazon Web Services (AWS). Static website files are delivered through Amazon CloudFront and stored in Amazon S3. When you visit this website, technical data such as your IP address, browser type, operating system, and the time of the request may be processed to provide, secure, and monitor the website. The legal basis for this processing is our legitimate interest in providing a secure and reliable website (Art. 6(1)(f) GDPR).

3. Email Waitlist

If you sign up for our waitlist, we collect and store your email address, the language you were reading the site in, and the campaign link you arrived through. Sign-ups use a double opt-in procedure: we send a confirmation link to the address and store nothing beyond a pending entry until you click it. As proof that the consent was given by the address holder, we record the time of your sign-up and of your confirmation together with the IP addresses they came from. Submissions are processed by AWS Lambda, stored in Amazon DynamoDB, and emails are sent through Amazon SES. We use this data to inform you about our upcoming launch and product updates. The legal basis is your explicit consent (Art. 6(1)(a) GDPR). Every email contains an unsubscribe link, and you can also withdraw your consent at any time by sending us an email, after which your data will be deleted. If you request creator access or apply as a first mover, we also store your name, the type and time of your request, your company for brand requests, and your message if you add one. We also use these details to process your request.

4. Contact Form

If you write to us through the contact form, we receive your email address, your message if you add one, the language of the page, and the campaign link you arrived through. These details are processed by AWS Lambda and sent by email through Amazon SES to our team mailbox; we do not store them in a database. We use them only to answer your request. The legal basis is Art. 6(1)(b) GDPR where your request is aimed at a contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete the message once your request has been dealt with, unless statutory retention obligations apply.

5. Reach Measurement

We use Plausible Analytics (Plausible Insights OÜ, Estonia) and PostHog (PostHog Inc., EU hosting in Frankfurt) to understand how the website is used. Both are configured to work without cookies: no identifier is stored on your device and visitors are not tracked across sessions or websites. We process the page requested, the referring site, the campaign parameters in the link you followed, and coarse technical data such as browser, operating system and country, derived from your IP address without storing it. PostHog additionally records anonymous interaction sessions, with all form fields masked, so we can see where the page is confusing; your email address is never captured this way. Because no information is stored on or read from your device, this requires no consent under § 25(2) TDDDG. The legal basis is our legitimate interest in an audience-appropriate website (Art. 6(1)(f) GDPR). You can object at any time by enabling your browser's Do Not Track setting, which both tools honour.

6. Your Data Protection Rights

Under the GDPR, you have the right to request access to your stored personal data, its origin, recipients, and the purpose of data processing at any time, free of charge. You also have the right to request the correction, blocking, or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.