Skip to content
undan
Join the waitlist

Privacy policy

This is a translation; the German version (DE at the top of the page) is the legally binding one.

In short: This website sets no cookies, tracks no one and loads nothing from third parties — no analytics scripts, no Google Fonts, no scripts from other servers. How many visits it gets, we count only from the web server's logs. Beyond that, we only process data when you join the waitlist, write to us or start a YouTube video. The details:

Who is responsible

Software That Matters, Peter Quiel
Schwaneyer Weg 8, 33100 Paderborn, Germany
Email: privacy@undan.app

When you visit the site

The site is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Like every web server, it logs technically necessary data for each request: the IP address, date and time, the requested address, the page you came from, browser and operating system, and the status of the response. This serves secure operation (fending off attacks, finding errors). We also count from these logs, in aggregate, how many visits the site gets, which pages are read and where visitors come from (referring page, country); we don't follow individual visitors in doing so. The legal basis is our legitimate interest in secure operation and in improving the site, Art. 6 (1) (f) GDPR. The logs are deleted after 90 days. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider; it is part of IONOS's general terms and conditions.

  • No cookies. The site stores nothing on your device and reads nothing from it.
  • No tracking. No analytics script, no advertising, no pixels, no profiles.
  • Fonts from our own server. We serve all fonts ourselves; your browser doesn't ask anyone else for them.

The waitlist (MailerLite)

When you join the waitlist, we process your email address. We use it only to send you news about Undan.

MailerLite runs the list on our behalf as a processor (Art. 28 GDPR): MailerLite Limited, 88 Harcourt Street, Dublin 2, D02 DK18, Ireland. The data processing agreement is part of MailerLite's terms of use. When you submit, the request goes directly from your browser to MailerLite (assets.mailerlite.com); MailerLite also receives your IP address in doing so.

  • Double opt-in: you first get an email with a link to confirm. Only then are you on the list. MailerLite stores the time and IP address of sign-up and confirmation so that we can prove your consent.
  • Legal basis is your consent, Art. 6 (1) (a) GDPR. You can withdraw it at any time — via the unsubscribe link in every email or with a message to the address above.
  • Storage period: until you unsubscribe. We keep the proof of your consent (address, times, IP addresses) for three more years after that — that's how long someone could claim we wrote without consent — and then delete it.
  • Tracking in the emails: MailerLite measures whether an email is opened and which link in it is clicked (via a small image and redirected links). We only look at aggregated numbers.
  • Where the data is stored: MailerLite stores it in data centres in the EU (sub-processor Google Cloud EMEA Limited, Ireland); a further sub-processor is Vercom S.A., Poland.
  • Transfers to third countries: under the agreement, MailerLite may also process data outside the EU — in countries without an adequacy decision of the European Commission only on the basis of its standard contractual clauses (Art. 46 (2) (c) GDPR).

When you write to us

If you send us an email, we process your address and your message in order to reply (Art. 6 (1) (b) or (f) GDPR) and delete them once they're no longer needed for that and no statutory retention obligation applies.

Videos from YouTube

Where a YouTube video is embedded, there is only a button at first — the video is loaded only after your click, before that no request goes to YouTube or Google. With the click, the player loads in privacy-enhanced mode from youtube-nocookie.com. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google receives your IP address and information about your browser, among other things; during playback YouTube may store data on your device and transfer data to Google LLC in the USA (Google is certified under the EU-US Data Privacy Framework). The legal basis is your consent by clicking, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Details in Google's privacy policy.

The application itself

This policy covers the website. The Undan application runs on your computer and sends us nothing; how it handles your data and when it talks to services such as Google or Anthropic is described in the questions on the home page and in the help.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7 (3)). A message to the address above is enough.

You can also lodge a complaint with a supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, which is responsible for us.

Last updated