Deutsch

Privacy policy

This is a translation. The German version is legally binding: Datenschutzerklärung.

As of: 31 October 2026

This policy applies to the website charterproof.app (including charterproof.de and charterproof.eu, which redirect here). The Charterproof app has its own privacy policy, which we will publish when the app launches.

1. Controller

David Marterer Morsestraße 27 75173 Pforzheim Germany

Email: hallo@charterproof.app Phone: +49 160 96608135

2. Summary

  • We use no cookies and no tracking that follows you across websites. That is why there is no cookie banner.
  • For statistics we use Plausible on our own server, without cookies and without profiles.
  • If you join the waitlist, we store your email address until you unsubscribe.
  • All data is stored on servers in the EU.

3. Hosting and access data

The website runs on our own server with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Germany. We have a data processing agreement with Hetzner (Art. 28 GDPR).

When you open a page, the server processes technically necessary data: the requested address, time, HTTP status and amount of data transferred and – only for the duration of the connection – your IP address and information about your browser. We do not store IP addresses in our access logs. Error logs may contain an IP address in individual cases. All logs are limited in size and are continuously overwritten automatically, usually after a few days.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is to deliver the website securely and reliably.

Fonts (Archivo, IBM Plex Mono) are hosted on our server. No content is loaded from Google or other third parties.

4. Statistics with Plausible

We use Plausible Analytics (software by Plausible Insights OÜ, Estonia) on our own server in Germany. No data is transferred to Plausible Insights OÜ.

Plausible does not set cookies and does not access information on your device. It records: the page visited, the referring page (referrer), browser, operating system, device type and country. Your IP address is not stored: a hash is created from the IP address and browser information together with a random value that changes daily, so that a visit is counted once per day. After 24 hours this hash can no longer be linked to a visitor. We only see aggregated figures.

We also count three events: “Warteliste abgeschickt” (waitlist submitted), “Warteliste bestätigt” (waitlist confirmed) and “Checkliste geöffnet” (checklist opened) – without your email address or any other information about you.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is to understand which content is read in order to improve the website.

5. Waitlist and check-in checklist

You can join our waitlist. We will write to you when the app launches and, before that, at most once a month with news about Charterproof. As a thank-you you receive our check-in checklist as a PDF.

What data: email address, chosen language, if applicable the source you came from (e.g. a campaign or partner code from the link), the times of signup, confirmation and unsubscription, and the version of the consent text. We do not store IP addresses.

Double opt-in: After signing up you receive an email with a confirmation link. Only after you confirm are you on the list. We delete unconfirmed entries after 30 days.

Legal basis: your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time with effect for the future – via the unsubscribe link in every email or by writing to hallo@charterproof.app.

Storage period: until you unsubscribe. After that we keep your email address marked as “unsubscribed” so that we reliably send you nothing more and can prove that you consented and withdrew your consent (Art. 6 (1) (c) and (f) GDPR in conjunction with Art. 7 (1) GDPR). We delete this information three years after you unsubscribe.

Storage: The waitlist is kept in a database at Supabase (Supabase Pte. Ltd., Singapore, with Supabase, Inc., USA, for technical support) in the Frankfurt am Main data centre. We have a data processing agreement with Supabase. In case Supabase staff outside the EU access data, the EU Commission’s standard contractual clauses have been agreed (Art. 46 (2) (c) GDPR). When you submit the form, Supabase logs the request for technical purposes (including time and IP address) to operate the service securely; Supabase deletes these logs automatically after a short time. We do not copy the IP address into our waitlist.

Sending: We send the emails via Mailjet (Mailjet SAS, 13-13 bis rue de l’Aubrac, 75012 Paris, France). Mailjet processes your email address and the content of the email on servers in the EU for this purpose. We do not analyse whether you open an email or click links; open and click tracking are switched off for every email. We have a data processing agreement with Mailjet.

6. Contact by email

If you write to us, we process your message and your contact details in order to reply. Our mailbox is hosted by Apple iCloud (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland).

The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract, otherwise Art. 6 (1) (f) GDPR (our interest in answering enquiries). We delete messages once they have been dealt with and no statutory retention obligations apply.

7. Encryption

The website is only available via HTTPS. Data you send to us is encrypted in transit.

8. Your rights

You have the right to:

  • access to your stored data (Art. 15 GDPR)
  • rectification (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdraw consent with effect for the future (Art. 7 (3) GDPR)

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6 (1) (f) GDPR, you can object at any time on grounds relating to your particular situation.

Simply write to hallo@charterproof.app.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

9. No automated decisions

We do not make automated decisions within the meaning of Art. 22 GDPR and do not create profiles.

10. Changes

We update this policy when the website or the legal situation changes. The version published here applies.