← Back

Privacy Policy

1. Data Controller

Marvin Schumann

Zwerchklamm 27

66453 Gersheim, Germany

2. Collection and Processing of Personal Data

Email Addresses (Waitlist)

When you sign up for our waitlist, we collect your email address. It is used solely to notify you about the launch of Frequenz.

Legal basis: Your consent pursuant to Art. 6(1)(a) GDPR.

Server Log Files

Each time you access our website, the hosting provider automatically collects information in server log files. This includes:

IP address of the requesting device
Date and time of access
Page visited / URL
HTTP status code
Amount of data transferred
Browser type and version
Referrer (previously visited page)

Purpose: Ensuring reliable operation, security, and error analysis.

Retention period: 7 days.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

3. Processors and Third-Party Providers

Vercel Inc. (Hosting)

Our website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel is certified under the EU-US Data Privacy Framework.

Formspree (Form Processing)

The waitlist form is processed via Formspree, Inc. (USA). Formspree receives your email address and optional survey responses (city, event habits, preferences) for the purpose of form forwarding. The data transfer to the USA is based on the EU-US Data Privacy Framework (adequacy decision by the European Commission pursuant to Art. 45 GDPR).

Supabase (Database & Authentication)

For app functionality, we use Supabase, Inc. (USA) as our database and authentication provider. The data transfer to the USA is based on EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

4. Cookies

We only use strictly necessary cookies for the Supabase authentication session. No tracking cookies, marketing cookies, or analytics cookies are used.

Legal basis: Section 25(2) TTDSG (strictly necessary cookies).

You can delete cookies or prevent their storage at any time in your browser settings. Without strictly necessary cookies, the app functionality may be limited.

4a. Analytics — Plausible

We use Plausible Analytics (Plausible Insights OU, Estonia) for statistical analysis of website usage.

Plausible does not set cookies and does not collect personal data. There is no cross-site tracking. Only aggregated data is collected:

Page views
Referral sources
Countries
Device types

Data processing takes place within the EU.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in anonymous analysis of website usage).

Plausible privacy policy: https://plausible.io/privacy

5. Fonts

All fonts (Bebas Neue, DM Sans, Space Mono) are served locally from our own server. No data is transferred to Google or other third-party providers.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR) — You have the right to request information about your personal data stored by us.
Right to rectification (Art. 16 GDPR) — You have the right to have inaccurate data corrected.
Right to erasure (Art. 17 GDPR) — You have the right to request the deletion of your data, provided no legal retention obligations apply.
Right to restriction of processing (Art. 18 GDPR) — You have the right to request the restriction of processing of your data.
Right to data portability (Art. 20 GDPR) — You have the right to receive your data in a structured, commonly used, and machine-readable format.
Right to object (Art. 21 GDPR) — You have the right to object to the processing of your data at any time, provided the processing is based on Art. 6(1)(f) GDPR.
Right to withdraw consent — If processing is based on your consent, you may withdraw it at any time with effect for the future.

To exercise your rights, contact: hello@frequenz.live

7. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:

Unabhängiges Datenschutzzentrum Saarland
Die Landesbeauftragte für Datenschutz und Informationsfreiheit
Fritz-Dobisch-Straße 12
66111 Saarbrücken

8. Retention Periods

Waitlist email addresses: until service launch or until you request deletion
Server log files: 7 days
Authentication data: until account deletion

Last updated: April 2026