Privacy Policy

3. Hosting

We host our website and use server functions from Vercel. The provider is Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA.

To ensure a high level of data protection, we have configured the server locations (Functions) permanently to Frankfurt am Main (Region: fra1) config. We have concluded a data processing agreement (DPA) with Vercel on the basis of the EU standard contractual clauses.

• The image files you upload are stored on Vercel's storage systems.
• Provisioning takes place via a Content Delivery Network (CDN) to ensure fast loading times.
• The images are technically accessible via a specific URL as long as they are actively used on the platform.

• There are no cookies set
• No IP addresses or identifiers are stored that allow any conclusions to be drawn about individual users.
• The data serves purely for technical optimization and the measurement of general performance.

Legal basis: Art. 6 Abs. 1 lit. b GDPR (performance of a contract to provide the profile functions) as well as Art. 6 Abs. 1 lit. f GDPR (legitimate interest in high-performance rendering).

4. Authentication and Database (Google Firebase)

We use Google Firebase to manage user accounts and Cloud Firestore as a database. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

• Firebase Auth (Necessary Cookie): To provide the login function, a technically necessary session cookie is set. This ensures that you remain logged in during your visit. Without this cookie, personalized use of the site is technically not possible.
• Firebase Cloud Firestore: All stored data (e.g. profiles, user content) is processed and stored in the Google Cloud region europe-west3 (Frankfurt).
• Optional Opt-In Cookie: On the login screen, you can choose the option 'Remember my last login method'. A cookie that stores your preferred login method for the next visit will only be set if you actively check this box (Art. 6 Abs. 1 lit. a GDPR).

5. E-Mail Notifications (Resend)

To send transactional emails (e.g., to verify your account or for system notifications), we use the Resend service. The provider is Resend Labs Inc., 2261 Market St #5039, San Francisco, CA 94114, USA.

As part of this service, your email address and technical dispatch data (time, delivery status) are transmitted to Resend. This is necessary to be able to deliver the emails to you.

We have concluded a data processing agreement (DPA) with Resend on the basis of the EU standard contractual clauses in order to ensure an adequate level of data protection when transferring data to the USA.

Legal basis: Art. 6 Abs. 1 lit. b GDPR (performance of a contract) as well as Art. 6 Abs. 1 lit. f GDPR (legitimate interest in reliable delivery of technical emails).

6. AI Content Creation (Gemini via Vercel AI Gateway)

Texts for testimonials, recommendations, and vouches for other users can be generated. To support this, we use the Gemini Flash 2.5 AI model from Google. The processing takes place via the Vercel AI Gateway .

• Data minimization: Only the text content you enter in the editor is transmitted to the AI interface.
• No storage: The generated texts are not stored permanently.
• Purpose: Automated creation/improvement of text suggestions.
• No profiling: Your user account is not linked to the AI request for training purposes by the provider.

Legal basis: Art. 6 Abs. 1 lit. b GDPR (performance of a contract).

7. Your Rights

Under the GDPR, you have the right to information, correction, deletion, restriction of processing at any time, as well as the right to data portability . If you have given consent (e.g. login cookie), you can revoke it at any time with effect for the future.

To exercise these rights, please contact the address mentioned under point 2.

8. Objection to advertising emails

The use of contact data published as part of the legal notice obligations for sending advertising that has not been explicitly requested is hereby objected to.