Privacy Policy
Controller
Moritz Mauruschat
doing business as “Kraft Labs”
Rotdornweg 10, 14482 Potsdam, Germany
labs@trykraft.comData Protection Officer
The appointment of a data protection officer is not required, as fewer than 20 persons are regularly involved in automated data processing (§ 38 BDSG).
Data Processing Activities
Hosting & Server Logs
We use Vercel Inc. for hosting. When you visit our website, the server automatically processes connection data to deliver the page and ensure security.
Data categories: IP address, request URL, timestamp, user agent, referrer
Legal basis: Art. 6(1)(f) GDPR – legitimate interest in operating the website
Retention: 30 days
Processor: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA
Essential Cookies
We use functional cookies to remember your language preference and cookie consent state. These are strictly necessary for the website to function.
Data categories: Language preference, consent state
Legal basis: § 25(2) TTDSG – strictly necessary
Retention: Session / 180 days (consent cookie)
Analytics (PostHog, cookieless)
We use PostHog in cookieless mode to understand how visitors use our public website. No tracking cookies are set for this analytics processing and no personal profiles are created from cookie identifiers.
Data categories: Page views, referrer, browser and OS type, approximate location (country level)
Legal basis: Art. 6(1)(f) GDPR – legitimate interest in understanding website usage
Retention: 24 months
Processor: PostHog Inc., San Francisco, USA
Error Monitoring & Analytics (PostHog)
We use PostHog to detect and fix errors and to understand how users interact with our application. This processes technical metadata to improve stability and user experience.
Data categories: Stack traces, URLs, browser and OS metadata, session recordings, page views
Legal basis: Art. 6(1)(f) GDPR – legitimate interest in stability and product improvement
Retention: 90 days
Processor: PostHog Inc., San Francisco, USA
Feedback Widget (Featurebase)
With your consent, we load the Featurebase feedback widget to collect product feedback. The widget also loads Google Fonts from Google servers, which transmits your IP address to Google.
Data categories: IP address, device type, browser type and version, operating system, feedback content, usage data (click patterns, session duration)
Legal basis: Art. 6(1)(a) GDPR – consent
Retention: Per Featurebase’s privacy policy
Processor: Featurebase OÜ, Tallinn, Estonia (uses US-based subprocessors including Mixpanel, PostHog for analytics)
International Data Transfers
Some of our processors are based outside the EU/EEA, in particular Vercel Inc. and PostHog Inc. in the USA. Additionally, Featurebase OÜ uses US-based subprocessors for analytics (Mixpanel, PostHog). When the feedback widget is active, Google Fonts are loaded from Google LLC servers in the USA. These transfers are safeguarded by the EU–US Data Privacy Framework (adequacy decision by the European Commission) and Standard Contractual Clauses (SCCs).
Your Rights
Under the GDPR, you have the following rights:
- Access to your data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdraw consent at any time (Art. 7(3) GDPR) without affecting the lawfulness of processing before withdrawal
Lodge a complaint with our competent supervisory authority:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow
Automated Decision-Making
No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.