Privacy notice

Summary

• Reading the site requires no account and sets no cookies of ours.
• If you submit a project, we store what you typed into the form, an optional contact email, a timestamp and a hashed IP address.
• If you request a consulting call, we store your name, email, what you wrote about your strategy and setup, a timestamp, a hashed IP address and your browser's user-agent string, only to reply to you.
• Data submitted through our site's forms is stored in a database hosted in the European Union (Frankfurt region) and is not sold or shared with advertisers.

Controller

The site is operated by InvestingStack. Privacy requests: support@investboard.de.

What we collect and why

Project submissions

The submission form stores the project details you enter, an optional contact email so we can ask follow-up questions, the time of submission and a one-way hash of your IP address. Legal basis: our legitimate interest in maintaining an accurate directory (Art. 6(1)(f) GDPR) and, for the optional email, your consent.

Consulting requests

The consulting request form stores your name, email, what you tell us about your strategy and current setup, the time of the request, a one-way hash of your IP address and your browser's user-agent string. We use it to reply and to prepare the intro call. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). Requests are deleted when the conversation ends without an engagement, or kept as part of the client record if one follows.

Server logs

Our hosting provider records standard access logs (IP address, requested URL, time, user agent) for security and operations. These logs are retained for a short period and are not used to profile visitors.

Cookies and analytics

InvestingStack uses Vercel Web Analytics to measure page views, visitors and traffic sources without tracking cookies. The reports include visited pages, referring websites, campaign tags, approximate location, browser and device type. We do not send form contents to analytics. Fonts are served from the site itself.

Processors

• Supabase (database for project submissions and consulting requests, hosted in the EU, Frankfurt region).
• Vercel (hosting, content delivery and cookie-free web analytics).
• Google Calendar (Google Workspace) (session bookings). Booking takes place on Google's page. Our site links to that page and loads no scheduling script.
• Google Workspace Gmail (internal notifications when a form is submitted). Alerts contain the request's reference and a link to the protected database dashboard; they do not contain the submitted form details.

Retention

Submissions are kept while they are being reviewed and for up to 24 months afterwards. Consulting requests are kept as described above. Access logs are kept by the hosting provider for its standard period.

Your rights

Under the GDPR you can request access to, correction of or deletion of your personal data, restrict or object to its processing, and receive it in a portable format. You also have the right to lodge a complaint with a data protection supervisory authority. To exercise these rights, write to support@investboard.de.

Changes

This notice is updated when the site's data handling changes. The date of the last change is in the site's commit history.