Privacy Policy

This is a courtesy translation. The legally binding version is the German Datenschutzerklärung.

1. Controller

The controller responsible for data processing on this website is:

2. Waitlist / Beta signup

When you join the waitlist, we process the following data:

• your email address (entered by you),
• the selected language and the time of signup,
• a technical confirmation token for the double opt-in.

Purpose: we notify you once, as soon as the Tipavio beta or launch starts. No further newsletter or advertising is sent.

Legal basis: your consent pursuant to Art. 6(1)(a) GDPR. Signup uses the double opt-in procedure — your registration only becomes active after you click the confirmation link in the email. You can withdraw your consent at any time, e.g. by email to the address above; we will then delete your entry.

Storage period: until withdrawal, at the latest when the project ends or the purpose (launch notification) has been fulfilled.

3. Protection against abuse (Cloudflare Turnstile)

To protect the signup form against automated abuse (bots/spam) we use Cloudflare Turnstile (Cloudflare, Inc., USA). Technical data such as your IP address and browser information may be transmitted to and checked by Cloudflare. The legal basis is our legitimate interest in secure, abuse-free operation (Art. 6(1)(f) GDPR).

4. Recipients / Processors

To provide the website and the signup we use service providers who process data on our behalf (Art. 28 GDPR):

• Supabase (Supabase, Inc.) — storage of the waitlist data.
• Resend (Resend, Inc.) — sending the confirmation email.
• Cloudflare (Cloudflare, Inc.) — hosting/delivery of the website (Cloudflare Pages) and bot protection (Turnstile).

Where data is transferred to countries outside the EU/EEA (e.g. the USA), this is based on appropriate safeguards (EU Standard Contractual Clauses or the EU-US Data Privacy Framework). Data processing agreements are in place with the providers named.

5. Server logs & hosting

When you access the website, the host (Cloudflare) processes technically necessary access data (e.g. IP address, time, page requested) to ensure delivery and security (Art. 6(1)(f) GDPR).

6. Fonts (Google Fonts)

This website loads fonts from Google Fonts (Google Ireland Ltd.). Your IP address is transmitted to Google in the process.

7. Your rights

You have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to withdraw a consent you have given at any time. You also have the right to lodge a complaint with a data protection supervisory authority.

Last updated: July 2026