Privacy Policy
Last updated: April 13, 2026
1. Data Controller
Leon Heinrich Fischerinsel 1A 10179 Berlin, Germany Email: hey[at]neograd.app
2. What Data We Collect
Waitlist signup: When you join our waitlist, we collect your email address. This data is processed by our email service provider, Loops.so.
Analytics: We use Vercel Analytics to collect anonymous, aggregated usage data (e.g., page views, referrers). Vercel Analytics does not use cookies and does not collect personally identifiable information.
Hosting: Our website is hosted on Vercel. Vercel may process technical data such as IP addresses in server logs as part of providing the hosting service.
3. Legal Basis
Waitlist email: Your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time by contacting us.
Analytics & hosting: Legitimate interest in operating and improving our website (Art. 6(1)(f) GDPR).
4. Third-Party Processors
- Vercel Inc. (San Francisco, USA) — hosting and analytics
- Loops.so (USA) — email waitlist management
These providers may process data outside the EU/EEA. Transfers are safeguarded by Standard Contractual Clauses (SCCs) or the EU–U.S. Data Privacy Framework.
5. Cookies
This website does not use tracking cookies. Vercel Analytics is cookieless. Only technically necessary cookies (if any) may be used to ensure the website functions correctly.
6. Your Rights
Under the GDPR, you have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Request erasure of your data (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing (Art. 21)
To exercise any of these rights, contact us at hey[at]neograd.app.
7. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority. The competent authority for Berlin is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin
www.datenschutz-berlin.de
8. Data Retention
Your email address is retained for as long as you remain on the waitlist or until you request removal. Analytics data is retained in aggregated, anonymized form and cannot be attributed to individual users.