Privacy Policy.

1. Controller

IP Strategy UG (haftungsbeschränkt), Niederrheinstraße 46f, 41472 Neuss, Germany — full details in the Impressum. Data protection contact: info@ipstrategy-group.de.

2. What we process, and why

Visiting the site

Our host, Vercel, processes technical request data including your IP address, user agent and the pages requested, in order to serve the site and keep it secure. Legal basis: legitimate interest, Art. 6(1)(f) GDPR.

Analytics — only if you agree

We use DataFast to understand which channels bring people to the board, and the aggregate visitor count it produces is shown publicly on the page. The tracking script is not loaded until you accept the cookie banner. Decline, and it is never loaded and no analytics cookie is set. Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG, withdrawable at any time.

When enabled it records page views, referrer, campaign parameters, approximate location derived from IP, device and browser type, and the interaction goals we define on this site (for example, opening the payment form), and sets the cookies in section 3.

Buying a spot

To create your listing we process the website address, the X username and the category you enter, and a logo: at your choice we retrieve the icon or logo the website you list already publishes, or store an image you upload before checkout. This data is published publicly on the board — that is the product. Uploaded images are stored under random names in our database's storage (Supabase, EU); an upload never followed by a payment is attached to nothing and no one. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.

When a visitor follows a listing's link, we add one to that listing's public click counter. Only the running total is stored — nothing about the visitor.

A sponsor payment (paying €1 on an existing listing's behalf) processes only which listing was chosen; the sponsor is not named on the board.

Payment

Payments are handled by Dodo Payments as merchant of record. Your name, email, billing address and payment details are collected by Dodo directly — we never see or store card details. Dodo acts as an independent controller for the payment and applies its own privacy policy. We receive the payment confirmation and your name and email in order to confirm your order and to meet our record-keeping obligations. Legal basis: contract, Art. 6(1)(b), and legal obligation, Art. 6(1)(c) GDPR.

We also attach your checkout confirmations — your acceptance of the Terms and Refund Policy and your consent to immediate performance, each with a timestamp — to the payment record held by Dodo Payments, as proof of those declarations. Legal basis: Art. 7(1) GDPR together with Art. 6(1)(c) and (f) GDPR.

Fulfilment

Your listing (website address, X username, category, logo, click and payment counters) and your payment reference are stored in our database, operated by Supabase and hosted in Frankfurt, Germany (EU). Your payment receipt is emailed to you by Dodo Payments directly. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.

Contacting us

If you write to us by email, we process your name, your email address and the content of your message in order to answer it. The contact form on the Impressum only pre-fills that email in your own email program — the website itself sends, receives and stores nothing when you use it. Legal basis: performance of a contract or pre-contractual steps, Art. 6(1)(b) GDPR, otherwise our legitimate interest in answering inquiries, Art. 6(1)(f) GDPR.

Your choices, stored in your browser

Your cookie accept-or-decline is stored in your browser's localStorage under beseen_consent, and your light-or-dark display choice under beseen_theme. Neither ever leaves your device; they exist so a refusal — and your preferred look — are honoured on your next visit.

Fonts are self-hosted on this domain. No font CDN, and no Google service, sees your visit.

3. Cookies and similar storage

Lifetimes are set by the DataFast script and may change with its versions; the listing here reflects the script as deployed on this site.

You can change your mind whenever you like: reopen the cookie choice. Declining after previously accepting also deletes the DataFast cookies listed above.

4. Who receives your data

The board database is hosted in the EU. Vercel, DataFast and Dodo Payments may process data outside the EU/EEA; where they do, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision (EU–US Data Privacy Framework), per each provider's data processing agreement. A copy of the safeguards that apply to your data can be requested at any time via info@ipstrategy-group.de.

5. How long we keep it

• Listing data — for as long as the listing runs (one year from its most recent payment), then up to 12 months after it lapses. Earlier on request (see section 6) or under the content standards in the Terms.
• Payment records — for the statutory retention period, which in Germany is up to ten years under tax and commercial law.
• Analytics — for as long as our DataFast account retains them; we review and prune analytics data at least annually.
• Contact messages — for as long as needed to handle the inquiry, at most 12 months after the exchange ends, unless a statutory retention duty applies.
• Server logs — for the short period set by Vercel's platform defaults.

6. Your rights

You have the right to access your data (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). Where processing rests on consent, you may withdraw it at any time with effect for the future.

Write to info@ipstrategy-group.de to exercise any of these.

You may also complain to a supervisory authority. The one responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

Listings are published deliberately — being seen is the product. A lapsed or erased listing is removed from the public board; its aggregate counters (the site totals) remain, since they identify nobody. Payment records we are legally required to retain (§ 147 AO, § 257 HGB) are kept regardless.