Privacy Policy
This policy explains how we handle personal data on lightkasse.de in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
1. Controller
Viktoriia Synia, Spichernstr. 8, 10777 Berlin, Germany.
Email: hello@lightkasse.de
2. What data we process and why
a) Waitlist sign-up (Double-Opt-In)
When you submit the form on this site, we store:
- your email address,
- the timestamp of your sign-up and, separately, the timestamp at which you ticked the consent box,
- the IP address at the moment of sign-up and at the moment of confirmation,
- the referring URL and user-agent string of your browser.
After you submit the form we send you an email containing a unique confirmation link. Your email address is only added to the active waitlist once you click that link (Double-Opt-In, in accordance with § 7 (2) No. 3 UWG). Sign-ups that are never confirmed are deleted after 14 days.
The IP and timestamp log is kept for as long as the active sign-up is stored and serves as proof of your consent (Art. 7 (1) GDPR, § 7 UWG).
Purpose: to notify you when LightKasse becomes available and to
keep you informed about pre-launch milestones.
Legal basis: Art. 6 (1) (a) GDPR (your consent, given by
submitting the form and confirming the link) and Art. 6 (1) (b) GDPR
(pre-contractual measures at your request).
Retention: until you unsubscribe or request deletion, at the
latest six months after the public launch of the product if you have not opted
in to further communication.
b) Server logs
Our hosting provider temporarily stores standard access data (IP address,
timestamp, requested URL, status code, user-agent) for up to seven days for
security and operational purposes.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure,
reliable website).
3. Processors
| Recipient | Purpose | Location |
|---|---|---|
| Supabase (Supabase Inc.) | Database storage for waitlist entries, Edge Functions | EU (Frankfurt, AWS eu-central-1) |
| Resend (Resend, Inc.) | Delivery of the confirmation email | EU / US (SCC + Art. 46 GDPR safeguards) |
| Cloudflare, Inc. | Website hosting (Cloudflare Pages) and DNS | Global edge network; EU data centers preferred |
A Data Processing Agreement (Art. 28 GDPR) is in place with each processor.
4. Cookies and tracking
This site does not set tracking cookies, does not use analytics tools, and does not embed third-party advertising. No cookie banner is required because no non-essential cookies are used.
5. Fonts
The typeface Manrope is loaded from Google Fonts. Google may briefly receive
your IP address for this purpose. We are working on self-hosting the font to
avoid this transfer.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a
consistent visual presentation).
6. Your rights
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)
To exercise any of these rights, email hello@lightkasse.de.
7. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority. The competent authority for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.
8. Change of controller
LightKasse is being prepared for operation by a company that is currently in the process of being formed. Once that company is registered, the role of controller will be transferred. You will be informed in advance by email and may object to the continued processing of your data at that point.
Last updated: 14 April 2026.