Privacy policy

With this statement we inform you under Art. 13 GDPR about which personal data we process on artikle.app, for what purpose and on what legal basis. The website is aimed at people aged 16 and over.

1. Controller

The controller in the sense of the GDPR is:

Seed Factory
Owner: Sergei Bartenev
c/o Block Services
Stuttgarter Str. 106
70736 Fellbach
Germany

For privacy questions you can reach us at hello@artikle.app. The full legal notice (Impressum) is available here.

2. Which data we collect

2.1 Waitlist (pre-launch)

If you sign up for the waitlist, we store:

• your email address,
• the time of sign-up and confirmation (double opt-in),
• an internal, non-personal source identifier (e.g. "Hero", "Footer") so we can see which sections of the site work,
• the locale (DE/EN/RU) you signed up from, so we can later write to you in the right language.

Purpose: sending a one-off invitation email at product launch and, if confirmed, occasional product updates until launch. Legal basis: your consent (Art. 6 (1) (a) GDPR), given via the confirmation link in our confirmation email (double opt-in). You can revoke your consent at any time without giving a reason, via the unsubscribe link in every email, or by writing to hello@artikle.app.

2.2 Server log files

When the site is accessed, the hosting provider automatically processes the following technical data: IP address, date and time of the request, requested path and user agent (browser and device identifier). This data is used exclusively for the operation and security of the website. Legal basis: legitimate interest (Art. 6 (1) (f) GDPR). Retention: at most 14 days, then automatic deletion.

2.3 Reach analytics

We use a self-hosted Umami in cookie-free configuration. No cookies are set, no browser fingerprint is collected, and no individual user profiles are built. Only aggregate metrics are recorded: page views, country of origin, device type, referrer, without any link to an identifiable person. The data-do-not-track setting is enabled. Legal basis: legitimate interest in a statistical analysis of reach (Art. 6 (1) (f) GDPR).

3. Processors used

To provide the functions above we use the following services. Data processing agreements (Art. 28 GDPR) are in place with all of them.

• Database (waitlist): Supabase Inc., hosted on Amazon Web Services EMEA SARL, EU region (Frankfurt am Main, Germany).
• Email delivery (double opt-in, invitation): Resend Inc., USA. Data transfer is based on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
• Website hosting: Hetzner Online GmbH, Gunzenhausen, Germany.
• Reach analytics: Umami, self-hosted on the same Hetzner server.
• Fonts: all fonts (Fraunces, Source Serif 4, JetBrains Mono) are served locally by our server. There is no connection to Google Fonts or any other external font provider.

4. Cookies and local storage

The site sets no cookies and uses neither localStorage nor sessionStorage for personal data. (We only use localStorage for a single key that remembers whether you have dismissed the language-suggestion banner; it contains no personal information.) A consent banner is therefore not required.

5. Embedded third-party content

The site does not embed third-party content (no YouTube videos, maps, social media widgets or payment providers). No connections are made to servers outside the services listed in section 3.

6. Retention

• Waitlist email: until the official product launch plus three months, but at most until you revoke your consent. The data is then deleted.
• Server log files: 14 days, then automatic deletion.
• Aggregate reach statistics (Umami): kept long-term pseudonymously and without any link to a person.

7. Your rights

Under the GDPR you have the following rights regarding your personal data:

• access to stored data (Art. 15 GDPR),
• correction of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• objection to processing (Art. 21 GDPR),
• withdrawal of consent at any time with future effect.

To exercise your rights, an informal message to hello@artikle.app is enough.

8. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence or of the alleged infringement (Art. 77 GDPR). In Germany this is usually the supervisory authority of the federal state where you live; at federal level it is the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

9. Changes to this statement

We reserve the right to amend this privacy policy when our services or the legal situation change. The current version is always available at artikle.app/privacy.