Nozzlino mascotNozzlino

Last updated: September 13, 2026

Privacy Policy

This policy explains what personal data Nozzlino collects on this pre launch site, why we collect it, and your rights under the EU General Data Protection Regulation. We collect as little as possible to validate interest before building the full app.

1. Controller

Marian Kästner
Löhstraße 10a, 51702 Bergneustadt, Germany
Email: contact@m-kaestner.com
Phone: +49 1514 1657692

2. Data we collect

  • Newsletter: email address you enter in the signup form, handled by our newsletter provider Brevo. See section 4 for details.
  • Contact emails: content of messages you send to us and your email address for replies.
  • Technical data: basic server and hosting logs such as IP address, date and time, requested page, and user agent for security and error diagnosis.
  • Web analytics: aggregated page views and referrers measured with Vercel Web Analytics, including requested URL and dynamic route, referrer, filtered query parameters, coarse geolocation (country, region, city), device type, operating system and browser version, event timestamp, and script version. We use only automatic page view tracking and send no custom events. The script collects data only in the production deployment. Visitors are distinguished only by a daily rotating hash derived from the incoming request. No cookies are set for analytics, no IP addresses are stored with analytics data, and visits cannot be tracked across days or across different websites.

We run no advertising trackers on this site. We do not build profiles.

3. Purposes and legal bases

  • Newsletter and early access emails: consent, Art. 6(1)(a) GDPR. You may withdraw consent at any time via the unsubscribe link in each email.
  • Web analytics with Vercel Web Analytics: legitimate interests, Art. 6(1)(f) GDPR. We measure aggregated reach, top pages, and referrers to understand interest during validation and to keep the site stable. Data is aggregated and cannot be linked to you across days or sites. You may object at any time with effect for the future; see section 7.
  • Security, prevention of abuse, and operation of the site: legitimate interests, Art. 6(1)(f) GDPR.

4. Processors and hosting

This site is hosted on Vercel. We use service providers to run it. They process data only on our instructions under Art. 28 GDPR data processing agreements where applicable:

  • Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (contact: privacy@vercel.com): hosting, content delivery, server logs, and Vercel Web Analytics. Vercel processes hosting and analytics data in the United States and other regions where it or its sub-processors operate. Transfers outside the EU are safeguarded by Vercel's EU-U.S. Data Privacy Framework certification and the EU Standard Contractual Clauses. See the Vercel Privacy Policy, the Vercel Data Processing Addendum, the Vercel Web Analytics privacy documentation, and the sub-processor list at security.vercel.com.
  • Neon (Neon, Inc.) via the Vercel Marketplace: Postgres database hosting for the site. No newsletter emails are stored in this database; signups are handled by Brevo below.
  • Brevo (Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France): newsletter signup and delivery via the embedded signup form. Brevo processes your email address to manage the newsletter list on our behalf. See the Brevo Privacy Policy for details.

We do not sell personal data and we do not share newsletter emails with third parties for marketing.

5. Cookies

Vercel Web Analytics sets no cookies and uses no local storage. It distinguishes visits only by a hash that rotates daily and is automatically discarded after 24 hours. Strictly necessary technical storage or a session cookie may still be used for security and load balancing. We run no advertising cookies. If account features launch later, this section will be updated before they go live.

6. Retention

Newsletter entries are kept until early access validation is complete, or until you unsubscribe or ask for deletion. Contact emails are kept as long as needed to handle your request. Server logs are kept short term and then deleted or anonymized. Web analytics hashes are discarded after 24 hours; only aggregated statistics without personal reference are retained.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to withdraw consent at any time with effect for the future. This includes the right to object to Vercel Web Analytics under Art. 21 GDPR on grounds relating to your particular situation. To exercise these rights write to contact@m-kaestner.com.

You also have the right to lodge a complaint with a supervisory authority, for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

8. Security

We use TLS encryption in transit and limit access to newsletter data. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

9. Changes

We will update this policy if the product or data processing changes, for example at app launch. The version published here applies at the time of your visit.

Related: Terms of Service and Legal Notice.

Privacy Policy, Nozzlino