1. Controller
2. Hosting and server logs
When you open this website, the hosting provider may process technically necessary data such as your IP address, date and time, requested URL, referrer, browser and operating system. This supports secure and stable delivery and prevents abuse.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure operation of the website.
3. Waitlist and email newsletter
When you join the list, we process your email address, language, sign-up time and, where available, campaign parameters. We use double opt-in, so you join only after confirming by email.
The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw it at any time using the unsubscribe link or our contact address.
4. Storing your consent choice
We store your analytics and marketing choice locally in your browser and mirror it in an essential first-party cookie. The cookie serves as a fallback if local browser storage is unavailable. It contains only the selected categories, the time of your choice and a version number.
5. Analytics and marketing
Google Analytics and the Meta and Reddit pixels load only in accordance with your consent. They may measure page views, interactions, sign-ups and App Store clicks. You can change your choice at any time in Cookie settings.
6. Recipients and international transfers
Recipients may include our hosting, email, analytics and marketing providers. Where data is processed outside the European Economic Area, we review and document the relevant transfer mechanism.
7. Retention
We keep personal data only for as long as it is needed for its purpose. Newsletter data is removed from active sending after withdrawal; required evidence of consent may be retained for longer.
8. Your rights
Depending on the applicable law, you may have rights to access, correction, deletion, restriction, portability and objection. You may withdraw consent for the future at any time and lodge a complaint with a data protection authority.
9. Version and changes
Draft dated September 2026. Before public launch, this policy will be aligned with the providers, contracts and settings actually in use.
10. Protecting the sign-up form
We use Cloudflare Turnstile to protect the form against automated abuse. Technically necessary connection and verification data may be sent to Cloudflare; the private verification key remains on our server. This supports secure operation based on our legitimate interest under Article 6(1)(f) GDPR.