Privacy Policy.
Datenschutzerklärung — what is collected, why, and what you can do about it.
Last updated 27 August 2026
1. Controller
IP Strategy UG (haftungsbeschränkt), Niederrheinstraße 46f, 41472 Neuss, Germany — full details in the Impressum. Data protection contact: info@ipstrategy-group.de.
2. What we process, and why
Visiting the site
Our host, Vercel, processes technical request data including your IP address, user agent and the pages requested, in order to serve the site and keep it secure. Legal basis: legitimate interest, Art. 6(1)(f) GDPR.
The visitor counter — cookieless, first-party
We count our own visitors, with no analytics provider involved. On each page view your browser sends one request to our own server, which reduces it to a short one-way code computed from the current date, your IP address and your browser type using a secret key. Only that code is stored — never the IP — it cannot be reversed, and because the date is part of the calculation the code changes every day, so visits on different days can never be linked to the same person. Nothing is set, stored or read on your device — which is why this site shows no cookie banner: § 25 TDDDG is not engaged.
The only outputs are the two aggregate numbers shown publicly on the page: visitors in total and visitors online right now. Legal basis: our legitimate interest in privacy-preserving reach measurement, Art. 6(1)(f) GDPR; you may object at any time (section 6).
Buying a spot
To create your listing we process the website address, the X username and the category you enter, and a logo: at your choice we retrieve the icon or logo the website you list already publishes, or store an image you upload before checkout. This data is published publicly on the board — that is the product. Uploaded images are stored under random names in our database's storage (Supabase, EU); an upload never followed by a payment is attached to nothing and no one. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.
When a visitor follows a listing's link, we add one to that listing's public click counter. Only the running total is stored — nothing about the visitor.
A sponsor payment (paying €1 on an existing listing's behalf) processes only which listing was chosen; the sponsor is not named on the board.
Payment
Payments are handled by Dodo Payments as merchant of record. Your name, email, billing address and payment details are collected by Dodo directly — we never see or store card details. Dodo acts as an independent controller for the payment and applies its own privacy policy. We receive the payment confirmation and your name and email in order to confirm your order and to meet our record-keeping obligations. Legal basis: contract, Art. 6(1)(b), and legal obligation, Art. 6(1)(c) GDPR.
We also attach your checkout confirmations — your acceptance of the Terms and Refund Policy and your consent to immediate performance, each with a timestamp — to the payment record held by Dodo Payments, as proof of those declarations. Legal basis: Art. 7(1) GDPR together with Art. 6(1)(c) and (f) GDPR.
Fulfilment
Your listing (website address, X username, category, logo, click and payment counters) and your payment reference are stored in our database, operated by Supabase and hosted in Frankfurt, Germany (EU). Your payment receipt is emailed to you by Dodo Payments directly. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.
Contacting us
If you write to us by email, we process your name, your email address and the content of your message in order to answer it. The contact form on the Impressum only pre-fills that email in your own email program — the website itself sends, receives and stores nothing when you use it. Legal basis: performance of a contract or pre-contractual steps, Art. 6(1)(b) GDPR, otherwise our legitimate interest in answering inquiries, Art. 6(1)(f) GDPR.
Your choices, stored in your browser
Your light-or-dark display choice is stored in your browser's
localStorage under beseen_theme. It never leaves your
device; it exists so your preferred look is honoured on your next visit.
The Launch Llama badge — only if you ask for it
The footer offers an “As seen on Launch Llama” badge. Its image is
hosted on launchllama.co, so displaying it means your browser requests it from
their server, which then sees your IP address. It therefore loads only after
you click — until then, nothing is requested from them. Whether you
accepted is remembered in localStorage under
beseen_llama, so the badge stays visible on later visits; remove
that entry and it returns to a click-to-load link. Legal basis for the load you
trigger: your consent, Art. 6(1)(a) GDPR.
Fonts are self-hosted on this domain. No font CDN, and no Google service, sees your visit.
4. Who receives your data
| Recipient | Role | What for |
|---|---|---|
| Vercel | Processor | Hosting and request logs |
| Dodo Payments | Independent controller | Payment, tax, receipts |
| Supabase (Frankfurt, EU) | Processor | The board database, including the anonymised visitor counter (section 2) |
| Launch Llama | Third party | The footer badge image — only after you enable it (section 2) |
| The public | — | Your listing, by design |
The board database is hosted in the EU. Vercel and Dodo Payments may process data outside the EU/EEA; where they do, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision (EU–US Data Privacy Framework), per each provider's data processing agreement. A copy of the safeguards that apply to your data can be requested at any time via info@ipstrategy-group.de.
5. How long we keep it
- Listing data — for as long as the listing runs (one year from its most recent payment), then up to 12 months after it lapses. Earlier on request (see section 6) or under the content standards in the Terms.
- Payment records — for the statutory retention period, which in Germany is up to ten years under tax and commercial law.
- Visitor counter — the daily one-way codes are kept as the basis of the running total; they are anonymised by design (no IP is ever stored, and codes from different days cannot be linked). We review and prune them at least annually.
- Contact messages — for as long as needed to handle the inquiry, at most 12 months after the exchange ends, unless a statutory retention duty applies.
- Server logs — for the short period set by Vercel's platform defaults.
6. Your rights
You have the right to access your data (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). Where processing rests on consent, you may withdraw it at any time with effect for the future.
Write to info@ipstrategy-group.de to exercise any of these.
You may also complain to a supervisory authority. The one responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).
Listings are published deliberately — being seen is the product. A lapsed or erased listing is removed from the public board; its aggregate counters (the site totals) remain, since they identify nobody. Payment records we are legally required to retain (§ 147 AO, § 257 HGB) are kept regardless.