Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Nils Berenbold Heckenweg 5 26605 Aurich, Germany Phone: +49 151 15268680 Email: [email protected]

2. Collection and Processing of Personal Data

We only collect personal data when you voluntarily provide it to us — in particular when signing up for our waitlist.

Waitlist Sign-up

When you sign up for our waitlist, we collect and process the following data:

Email address
IP address (at the time of sign-up, for security and anti-abuse purposes)
Date and time of sign-up and confirmation
Language preference

Sign-up uses a double opt-in process: after entering your email address, you will receive a confirmation email. Your registration is only activated after clicking the confirmation link.

3. Purpose of Data Processing

We process your data for the following purposes:

Notifying you about the Schnippy launch and major product updates
Confirming your waitlist sign-up (double opt-in)
Protection against abuse and automated sign-ups

4. Legal Basis

Processing your email address for the waitlist is based on your explicit consent pursuant to Art. 6(1)(a) GDPR. Processing of the IP address for anti-abuse purposes is based on our legitimate interests pursuant to Art. 6(1)(f) GDPR.

5. Storage Period

Your data will be stored until Schnippy officially launches and you have been notified, or until you withdraw your consent. After launch, unconfirmed entries will be deleted. IP addresses are deleted after a maximum of 90 days.

6. Disclosure to Third Parties

Your data will not be sold to third parties or shared for advertising purposes. We use the following processors to provide our services:

Hetzner Online GmbH Hosting our servers (Germany).
Twilio Inc. (SendGrid) Sending confirmation emails.
Google LLC Web analytics via Google Analytics 4 (USA). See the Google Analytics section below for details.

Data processing agreements pursuant to Art. 28 GDPR have been concluded with these processors.

7. Your Rights

You have the following rights with respect to us:

Access (Art. 15 GDPR) — You may request information about the data we store about you.
Rectification (Art. 16 GDPR) — You may request the correction of inaccurate data.
Erasure (Art. 17 GDPR) — You may request the deletion of your data.
Restriction (Art. 18 GDPR) — You may request the restriction of processing.
Data portability (Art. 20 GDPR) — You may request the transfer of your data.
Objection (Art. 21 GDPR) — You may object to the processing of your data.

To exercise your rights, please contact: [email protected]

8. Right to Withdraw Consent

You may withdraw your consent to the processing of your email address at any time with effect for the future. To do so, send an email to [email protected]. The lawfulness of processing carried out before the withdrawal remains unaffected.

9. Cookies and Tracking

This website uses technically necessary cookies required for its operation (e.g. for language preferences). These cookies do not contain personal data. In addition, we use Google Analytics 4, which also uses cookies — see the following section for details.

10. Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies and similar technologies to analyse how our website is used and to generate reports about website activity.

Data collected

Google Analytics 4 collects and processes the following data:

Page views and navigation paths
Time spent on the website
Approximate geographic location (city/region level)
Device information (browser, operating system, screen resolution)
Referrer (previously visited website)

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR, which you can grant via our cookie banner. You may withdraw your consent at any time by adjusting your cookie settings via the link in the footer.

Google LLC may transfer the collected data to the USA. Google is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection.

For more information about Google's privacy practices: https://policies.google.com/privacy

11. Data Security

We employ technical and organisational measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. Transmission between your browser and our server is encrypted via HTTPS.

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent authority for Lower Saxony is:

Die Landesbeauftragte für den Datenschutz Niedersachsen Prinzenstraße 5 30159 Hannover, Germany

13. Currency and Changes

This privacy policy is currently valid as of March 2026. Due to the further development of our website or changes in legal requirements, it may be necessary to update this privacy policy.