Privacy policy

1 · Controller

Pocket Agency GmbH, Kollwitzstraße 76, 10435 Berlin, Germany, is the controller (Verantwortlicher) under Art. 4 (7) GDPR for the processing described here. Contact: privacy@keaz.app.

2 · Hosting and server logs

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the site, Vercel processes technical connection data (IP address, browser user agent, requested page, timestamp) in server logs to deliver the site and defend against attacks. Legal basis: our legitimate interest in operating a secure, functioning website (Art. 6 (1)(f) GDPR). We have a data processing agreement with Vercel; transfers to the USA are covered by the EU–US Data Privacy Framework and standard contractual clauses.

3 · Cookies and the cookie banner

This site uses two kinds of cookies.

Necessary. The Cookiebot consent cookie (CookieConsent) records the choice you make in the cookie banner and keeps it for twelve months, so the banner does not reappear on every visit. It contains no identifier that could recognise you on other sites, and it is set without consent (§ 25 (2) TTDSG / Art. 6 (1)(f) GDPR).

Statistics. Only if you agree in the cookie banner, we load Google Analytics 4 (see section 4). It sets two cookies: _ga, and a second one whose name is _ga_ followed by our measurement id. Both hold a randomly generated identifier so that repeat visits and the pages you view can be counted together, and both expire two years after your last visit. Nothing in this category is set before you have given your consent. Legal basis: your consent (Art. 6 (1)(a) GDPR, § 25 (1) TTDSG).

We use no marketing or advertising cookies on this website.

The cookie banner. When you first visit, a banner asks whether you agree to statistics cookies. It is provided by Cookiebot (Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark), which processes an anonymised IP address, the date and time of your choice, your browser's user agent and the page URL in order to record it. Legal basis: our legal obligation to obtain and document consent (Art. 6 (1)(c) GDPR). You choose on your first visit and can change your mind at any time: open Cookie settings in the footer to withdraw or grant consent. Withdrawing consent stops any further processing; it does not affect what was lawfully processed beforehand.

4 · Analytics

PostHog. We use PostHog to understand how the site is used (pages viewed, interactions with page elements). Our PostHog project runs on PostHog's EU cloud (PostHog, Inc., hosted in the EU) under a data processing agreement. The integration is deliberately cookieless: it sets no cookie, stores no identifier in your browser, and cannot recognise you across visits — each page load starts a fresh, anonymous session. Legal basis: our legitimate interest in understanding and improving the site (Art. 6 (1)(f) GDPR).

Google Tag Manager and Google Analytics 4 (with your consent). If you allow statistics cookies, Google Tag Manager loads Google Analytics 4. Google Analytics measures which pages are visited, which source you arrived from, roughly where you are (Google Analytics 4 does not store IP addresses) and which actions you take, for example clicking through to sign up. We use this to see which content and which channels bring people here. Google Signals and the advertising features in Google Analytics are not enabled, and we do not use this data to build profiles for any other purpose. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data may be transferred to Google LLC in the United States under the EU–US Data Privacy Framework and the EU Standard Contractual Clauses. Legal basis: your consent (Art. 6 (1)(a) GDPR, § 25 (1) TTDSG). Google's own information: https://policies.google.com/privacy and https://business.safety.google/adsprocessorterms/.

Google Tag Manager itself sets no cookie and collects no personal data; it only loads the tools you have consented to.

Withdrawing and blocking. Open Cookie settings in the footer to withdraw your consent at any time. Independently of that, Google provides a browser add-on that prevents Google Analytics from collecting data on any website: https://tools.google.com/dlpage/gaoptout. PostHog needs no opt-out mechanism beyond a content blocker, because it stores no identifier in your browser. You can also object to the processing described here at any time (section 7).

5 · Contact by email

If you email us, we process your address and message content to answer your request (Art. 6 (1)(b) or (f) GDPR) and delete the correspondence once the matter is settled, unless statutory retention duties apply.

6 · Retention

Server logs are retained by our hosting provider for a short, technically determined period. PostHog data is stored without browser identifiers. In Google Analytics, event data is retained for 2 months and user data for 14 months, after which each is deleted automatically. The consent record described in section 3 is kept for twelve months. We store no other visitor data on this website.

7 · Your rights (GDPR Art. 15–22)

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. Where we rely on legitimate interest — server logs and PostHog — you can object at any time under Art. 21 GDPR using the address in section 8, and we will stop that processing unless we can demonstrate compelling grounds to continue. Where we rely on your consent — Google Analytics — you can withdraw it at any time with effect for the future, for cookies directly via Cookie settings in the footer. You may also lodge a complaint with a supervisory authority — for us, the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

8 · Contact

For any privacy request: privacy@keaz.app.