Privacy, before you enter your email.
You decide whether to join and receive optional news. Here is what information we need and how you can have it deleted.
Controller and contact
Maximilian Huang, Maxfeldhof 2 85716 Unterschleißheim, Germany. Privacy requests: [email protected].
This notice covers this website, the waitlist and enquiries. A future app may process other data and will have its own privacy notice.
Information needed for the waitlist
- Email address;
- iOS or Android selection;
- Country or region of residence;
- Confirmation that you are at least 18;
- Language of your sign-up;
- Separate beta and marketing consent choices;
- Evidence of double opt-in: timing, confirmation status, consent wording or version, and technical information needed for delivery.
Purposes and legal basis
We use your details to confirm your entry, tell you about availability in your country, and send suitable beta invitations and essential participation information. Your selected country or region helps us match messages to the relevant launch. We do not infer your residence from your IP address. We use your sign-up language for the confirmation email and language-appropriate messages. Product news is sent only if you separately opt in. Each consent is based on Article 6(1)(a) GDPR and is documented separately. Providing information is voluntary, but an email address, country or region and the required confirmations are needed to join. There is no automated decision with legal effect or profiling for advertising.
Double opt-in
After you submit the form, we send a confirmation email. Your entry is activated only through its confirmation link. This provides evidence that the address can be reached and that the sign-up was confirmed.
Waitlist and emails with Brevo
We use Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, for contact management and email delivery. Data processing terms form part of the Brevo terms, including the data processing agreement. Brevo receives the sign-up details above and technical delivery and confirmation information. Personalised open and click tracking for optional news is disabled without separate tracking consent. Anonymised tracking is enabled for transactional confirmation emails: Brevo counts opens and clicks in aggregate statistics without associating these events with a particular contact. Information needed for delivery and confirmation is unaffected.
Retention
Unconfirmed addresses are not added to the active waitlist. Transactional delivery logs are configured for one month of retention, after which Brevo deletes them, with a possible technical delay of up to 24 hours. New email previews are not saved there. We use confirmed waitlist details until consent is withdrawn or the waitlist’s purpose for your country ends. Separately subscribed news continues until you unsubscribe or we stop sending it. We then delete data no longer needed for that purpose. Necessary consent or objection records may be retained for the limited purpose of meeting legal obligations or defending specific claims; they are not used to continue sending emails.
Withdrawing consent and unsubscribing
You may withdraw each consent at any time for the future. Email the privacy contact above and say whether you want to stop waitlist emails, news or both. Optional news also includes an unsubscribe link. A global unsubscribe in Brevo may stop other marketing emails too. For a specific unsubscribe request or complete deletion, contact us by email. Withdrawal does not affect the lawfulness of processing before it.
Hosting and secure delivery
The website runs on Cloudflare Pages, with a server-side sign-up function provided by Cloudflare, Inc., USA. This involves processing your IP address, requested URL, timestamp, browser and connection information. The sign-up function sends your form details to Brevo over an encrypted connection; it has no separate contact database and does not log form contents. Our legitimate interest in secure operation, preventing errors and delivering the website is the basis under Article 6(1)(f) GDPR. Cloudflare’s data processing addendum applies.
Protection against automated sign-ups
When you use the form, we load Cloudflare Turnstile. Cloudflare checks technical signals such as IP address, browser details and connection characteristics. Our website does not send the email address you enter to the spam check. This necessary security check prevents abusive sign-ups and emails; it is based on Article 6(1)(f) GDPR and, for necessary device access, section 25(2)(2) TDDDG. Cloudflare also processes technical signals under its own responsibility to improve bot detection. See the Turnstile privacy notice for details and contact options. The form cannot be submitted without a successful check.
Transfers outside the EU
Cloudflare and subprocessors may process data outside the European Economic Area, particularly in the USA. Depending on the recipient, providers use adequacy decisions such as the EU–US Data Privacy Framework or EU standard contractual clauses. The linked data processing agreements describe safeguards and subprocessors. You can also request a copy of applicable safeguards through our privacy contact.
Contact by email
If you email us, we process your sender address, message and any other details you choose to provide to respond. Messages to our support and privacy addresses are forwarded through Cloudflare Email Routing to our Gmail inbox at Google. Google Ireland Limited is responsible for Google users in the EEA. The Google privacy policy, including its international transfer information, applies. The basis is Article 6(1)(b) GDPR for contract-related enquiries, or otherwise our legitimate interest in responding under Article 6(1)(f). We delete resolved enquiries when no longer needed for handling, legal obligations or specific legal claims.
Language selection, cookies and analytics
Cloudflare’s country information is used to choose the initial website language. If it is unavailable, we use your browser’s language preference. You can always switch between German and English. When you switch, a necessary preference cookie named lumi_language remembers your choice for up to six months. It contains only de or en. This does not select or store your country of residence. Language delivery is based on Article 6(1)(f) GDPR; remembering the choice you request is based on section 25(2)(2) TDDDG. The website has no advertising or analytics pixels. Fonts and images are served locally. We do not set advertising or audience-measurement cookies or save form details in browser storage. The security check and necessary connection data described above are unaffected.
Your rights
Under the GDPR, you have rights of access, rectification, erasure, restriction and data portability, subject to its conditions. You may object to processing based on legitimate interests for reasons arising from your particular situation, and to direct marketing at any time. You may also complain to a data protection authority, particularly the Bavarian State Office for Data Protection Supervision. To exercise your rights, email our privacy contact.