Privacy Policy.
Datenschutzerklärung — what is collected, why, and what you can do about it.
Last updated 26 August 2026
1. Controller
IP Strategy UG (haftungsbeschränkt), Niederrheinstraße 46f, 41472 Neuss, Germany — full details in the Impressum. Data protection contact: info@ipstrategy-group.de.
2. What we process, and why
Visiting the site
Our host, Vercel, processes technical request data including your IP address, user agent and the pages requested, in order to serve the site and keep it secure. Legal basis: legitimate interest, Art. 6(1)(f) GDPR.
Analytics — cookieless
We use DataFast in its cookieless mode to understand which channels bring people to the board; the aggregate visitor count it produces is shown publicly on the page. The script sets no cookie and stores nothing on your device — which is why this site shows no cookie banner: § 25 TDDDG is not engaged, because nothing is stored on or read from your terminal equipment.
It records page views, referrer, campaign parameters, approximate location derived from IP, device and browser type, and the interaction goals we define on this site (for example, opening the payment form) — without building cross-site profiles. Legal basis: our legitimate interest in privacy-preserving reach measurement, Art. 6(1)(f) GDPR; you may object at any time (section 6).
Buying a spot
To create your listing we process the website address, the X username and the category you enter, and a logo: at your choice we retrieve the icon or logo the website you list already publishes, or store an image you upload before checkout. This data is published publicly on the board — that is the product. Uploaded images are stored under random names in our database's storage (Supabase, EU); an upload never followed by a payment is attached to nothing and no one. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.
When a visitor follows a listing's link, we add one to that listing's public click counter. Only the running total is stored — nothing about the visitor.
A sponsor payment (paying €1 on an existing listing's behalf) processes only which listing was chosen; the sponsor is not named on the board.
Payment
Payments are handled by Dodo Payments as merchant of record. Your name, email, billing address and payment details are collected by Dodo directly — we never see or store card details. Dodo acts as an independent controller for the payment and applies its own privacy policy. We receive the payment confirmation and your name and email in order to confirm your order and to meet our record-keeping obligations. Legal basis: contract, Art. 6(1)(b), and legal obligation, Art. 6(1)(c) GDPR.
We also attach your checkout confirmations — your acceptance of the Terms and Refund Policy and your consent to immediate performance, each with a timestamp — to the payment record held by Dodo Payments, as proof of those declarations. Legal basis: Art. 7(1) GDPR together with Art. 6(1)(c) and (f) GDPR.
Fulfilment
Your listing (website address, X username, category, logo, click and payment counters) and your payment reference are stored in our database, operated by Supabase and hosted in Frankfurt, Germany (EU). Your payment receipt is emailed to you by Dodo Payments directly. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.
Contacting us
If you write to us by email, we process your name, your email address and the content of your message in order to answer it. The contact form on the Impressum only pre-fills that email in your own email program — the website itself sends, receives and stores nothing when you use it. Legal basis: performance of a contract or pre-contractual steps, Art. 6(1)(b) GDPR, otherwise our legitimate interest in answering inquiries, Art. 6(1)(f) GDPR.
Your choices, stored in your browser
Your light-or-dark display choice is stored in your browser's
localStorage under beseen_theme. It never leaves your
device; it exists so your preferred look is honoured on your next visit.
Fonts are self-hosted on this domain. No font CDN, and no Google service, sees your visit.
4. Who receives your data
| Recipient | Role | What for |
|---|---|---|
| Vercel | Processor | Hosting and request logs |
| DataFast | Processor | Cookieless analytics |
| Dodo Payments | Independent controller | Payment, tax, receipts |
| Supabase (Frankfurt, EU) | Processor | The board database |
| The public | — | Your listing, by design |
The board database is hosted in the EU. Vercel, DataFast and Dodo Payments may process data outside the EU/EEA; where they do, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision (EU–US Data Privacy Framework), per each provider's data processing agreement. A copy of the safeguards that apply to your data can be requested at any time via info@ipstrategy-group.de.
5. How long we keep it
- Listing data — for as long as the listing runs (one year from its most recent payment), then up to 12 months after it lapses. Earlier on request (see section 6) or under the content standards in the Terms.
- Payment records — for the statutory retention period, which in Germany is up to ten years under tax and commercial law.
- Analytics — for as long as our DataFast account retains them; we review and prune analytics data at least annually.
- Contact messages — for as long as needed to handle the inquiry, at most 12 months after the exchange ends, unless a statutory retention duty applies.
- Server logs — for the short period set by Vercel's platform defaults.
6. Your rights
You have the right to access your data (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). Where processing rests on consent, you may withdraw it at any time with effect for the future.
Write to info@ipstrategy-group.de to exercise any of these.
You may also complain to a supervisory authority. The one responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).
Listings are published deliberately — being seen is the product. A lapsed or erased listing is removed from the public board; its aggregate counters (the site totals) remain, since they identify nobody. Payment records we are legally required to retain (§ 147 AO, § 257 HGB) are kept regardless.