Privacy Policy
Last updated: October 4, 2026
1. Data Protection Overview
The following gives a simple overview of what happens to your personal information when you visit our website. Personal information is any data with which you could be personally identified.
2. Data Collection on Our Website
Who is responsible for the data collection on this website?
The data collected on this website are processed by the website operator. The operator's contact details can be found in the website's imprint section.
How do we collect your data?
Some data are collected when you provide it to us. This could, for example, be data you enter on a contact form.
Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.
3. Hosting
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel processes the technical data your browser sends (such as IP address, browser type and time of access) to deliver the pages and protect the service against abuse. These server logs are kept for a short period only.
The legal basis is our legitimate interest in a secure and reliable website (Art. 6(1)(f) GDPR). Vercel is certified under the EU-U.S. Data Privacy Framework. More information: https://vercel.com/legal/privacy-policy
4. Company Submissions and Priority Review
What we collect
When you submit a company on our submission page, we collect the details you enter: company name, website, headquarters, year founded, category, description, the US tools it replaces and your contact email address.
Why and on what legal basis
We use this information to review the company against our listing requirements, to contact you about the result and, if we list the company, to publish the listing. The legal basis is the performance of a contract or of steps taken at your request before entering into one (Art. 6(1)(b) GDPR).
Where it is stored
Submissions are stored in a database operated by Neon, Inc. (USA) on servers in Frankfurt, Germany. We also receive each submission by email, sent through Resend (Plus Five Five, Inc., USA). Both act as our processors under data processing agreements. Because both are US companies, access from the USA cannot be ruled out; such transfers are covered by the EU standard contractual clauses.
Payments
If you choose priority review, payment is handled by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe collects your payment details directly; we never see your full card or account details. We receive the payment status, the amount, your email address and the billing details Stripe needs to issue the invoice. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). Stripe may transfer data to Stripe, Inc. in the USA, which is certified under the EU-U.S. Data Privacy Framework. More information: https://stripe.com/privacy
How long we keep it
Submissions that lead to a listing are kept as long as the listing exists. Submissions we decline are deleted no later than 12 months after our decision. Invoices and payment records are kept for the periods required by German tax and commercial law (§ 147 AO, § 257 HGB).
5. Your Rights
You have the right to:
- Request information about your personal data we process
- Request rectification of inaccurate personal data
- Request erasure of your personal data
- Request restriction of processing of your personal data
- Object to processing of your personal data
- Request data portability
- Withdraw consent at any time
If you have any questions about data protection, please contact us using the information provided in the imprint section.
6. Umami Analytics
This website uses Umami Analytics, a privacy-focused web analytics service. Umami is designed to provide lightweight, cookieless analytics with minimal data collection.
Key privacy features of Umami:
- No cookies: Umami does not rely on cookies for standard traffic measurement.
- Minimal data collection: We use analytics only to understand aggregate website usage and improve the site.
- Privacy-focused: Umami is built to avoid invasive tracking patterns common in traditional analytics tools.
- Open source: Umami's code is open source and can be audited.
Because our analytics setup is privacy-focused and cookieless, we do not use an analytics cookie banner for standard website measurement.
For more information about Umami's privacy practices, please visit: https://umami.is/privacy
7. YouTube
Our website embeds videos from YouTube, a service provided by Google LLC. When you view embedded YouTube videos on our website, YouTube may collect data about your interaction, including your IP address and viewing behavior.
If you are logged into your YouTube account, YouTube may associate your viewing behavior with your profile. To prevent this, you can log out of your YouTube account before accessing our website.
YouTube uses cookies and similar technologies to provide its services. For more information about how YouTube processes data, please refer to YouTube's Privacy Policy: https://policies.google.com/privacy
8. Affiliate Marketing and Links
Our website participates in affiliate marketing programs, including but not limited to Amazon Associates and other affiliate programs. This means that some links on our website are affiliate links.
When you click on an affiliate link and make a purchase, we may receive a commission at no additional cost to you. Affiliate links are identified by special tracking parameters (e.g., "tag=decisionrank-20" for Amazon links).
When you click on affiliate links, you will be redirected to third-party websites (such as Amazon or other retailers). These third-party websites have their own privacy policies and terms of service. We are not responsible for the privacy practices or content of these external websites.
We only recommend products that we believe are valuable to our users. Our editorial content and product rankings are independent of any affiliate relationships.
For more information about how these third-party services handle your data, please refer to their respective privacy policies:
- Amazon Privacy Policy: https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ
9. Cookies
Our website uses minimal cookies. We have intentionally chosen privacy-focused solutions to minimize cookie usage.
Our cookie usage:
- No analytics cookies: We use Umami Analytics, which is configured for cookieless analytics.
- Third-party cookies: Embedded YouTube videos may set cookies when you interact with them.
- Essential cookies: We may use essential cookies for core website functionality.
You can control and manage cookies through your browser settings. Most browsers allow you to refuse or accept cookies, and to delete cookies that have already been set.
For more information about managing cookies, please visit: https://www.allaboutcookies.org
10. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:
- Legitimate interests: We use Umami Analytics for aggregated usage statistics based on our legitimate interest in improving our website.
- Consent: For embedded third-party content (such as YouTube videos), we rely on your consent when you choose to interact with such content.
- Contractual necessity: Processing company submissions and priority review payments (Art. 6(1)(b) GDPR).
- Legal obligation: Keeping invoices and payment records (Art. 6(1)(c) GDPR).
11. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.
Analytics data from Umami is used in aggregate form to help us understand site usage and improve the website. For more information about Umami's data practices, visit: https://umami.is/privacy
12. International Data Transfers
We prefer service providers that keep data in the EU. Some of the providers we use are US companies, so data may be accessed from or transferred to the USA:
- Umami Analytics: privacy-focused analytics service used for aggregate website measurement
- Vercel: website hosting. Certified under the EU-U.S. Data Privacy Framework.
- Neon: database for company submissions, hosted in Frankfurt, Germany. Covered by the EU standard contractual clauses.
- Resend: email delivery for submission notifications. Covered by the EU standard contractual clauses.
- Stripe: payment processing for priority review. Contract partner is Stripe Payments Europe, Limited (Ireland); Stripe, Inc. is certified under the EU-U.S. Data Privacy Framework.
- YouTube (Google): When you interact with embedded videos, data may be transferred to the US. Google has certified compliance with the EU-U.S. Data Privacy Framework.
13. Third-Party Services
Our website integrates with third-party services including:
- Umami Analytics (privacy-focused analytics) - Privacy Policy
- YouTube (for embedded videos) - Privacy Policy
- Resend (for submission emails) - Privacy Policy
- Vercel (hosting) - Privacy Policy
- Neon (submission database) - Privacy Policy
- Stripe (payments) - Privacy Policy
We encourage you to review their privacy policies to understand how they handle your data.
14. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Last updated" date.
We encourage you to review this privacy policy periodically to stay informed about how we protect your information.
15. Contact Us
If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:
Email: hello@till.email
Address:
Till Kemper
Blütenstraße 19a
80799 Munich
Germany
You also have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates applicable data protection laws. The relevant supervisory authority for Germany is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: https://www.lda.bayern.de