Privacy
Who is responsible
Louis Friedrich, c/o COCENTER, Koppoldstr. 1, 86551 Aichach, Germany. Email: [email protected]. The full details are in the imprint.
In short
This site sets no cookies and uses no analytics. Fonts, images and the video are served from this domain. Personal data is only processed to deliver the pages, to run the waitlist if you join it, and to answer you if you write to me. Something is stored in your browser only if you join the waitlist, described below.
Hosting
This site runs on Cloudflare Pages, operated by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open a page, Cloudflare processes your IP address, the time, the requested address, your browser's user agent and similar technical data. It needs these to deliver the page and to keep the service safe from attacks. I do not keep these logs myself.
Legal basis is Art. 6(1)(f) GDPR. My legitimate interest is a site that loads reliably and securely. Cloudflare acts as my processor under its Data Processing Addendum, which is part of Cloudflare's terms of service. Data may be transferred to the USA. Cloudflare is certified under the EU-US Data Privacy Framework, and the addendum also contains the EU standard contractual clauses. More in Cloudflare's privacy policy.
Waitlist
You can join the waitlist with the form on the start page. It is for one email when Nevex is on the App Store and, if you tick the box, an invite to the TestFlight beta. Nothing else is sent to you.
Confirmation by email (double opt-in)
After you send the form, you get an email with a confirmation link. Only when you click it are you on the list. If you do not click it, nothing more happens, and the unconfirmed entry is deleted after 7 days. The confirmation email contains no advertising.
What is stored
Your email address, the time you signed up, the time you confirmed, whether you want the beta invite, which version of the text under the button you agreed to, and, if you leave the list, the time you left. The links in the emails are stored only in a form that cannot be turned back into a working link (a hash). Your IP address is not stored with your entry.
The list is kept in a Cloudflare D1 database whose data is stored in the EU (EU jurisdiction). Cloudflare acts as my processor, as described under Hosting.
Sending the emails: Lettermint
The confirmation email and the launch email are sent through Lettermint, operated by Lettermint B.V., the Netherlands, on servers in the EU. Lettermint receives your email address and the content of the email to deliver it, as my processor under a data processing agreement, and keeps the address and the delivery record for 28 days. Lettermint only sends; your address is not added to a contact list there. If an email to you bounces or is reported as spam, Lettermint keeps your address on a block list so it is not emailed again. More in Lettermint's privacy policy.
The two small pictures in the emails (the Nevex mark and the raccoon) are loaded from nevex.app when your mail app shows them, which works like opening a page of this site (see Hosting). The emails contain no tracking pixel, and nobody counts whether or when you open them.
What your browser remembers
After you send the form, your browser stores in its local storage whether this device signed up (pending, then confirmed once you click the link), without your email address, so the form is not shown to you again; it never leaves your device, and "Use another address" under the note or clearing the site data for nevex.app in your browser deletes it. Storing it is strictly necessary for the service you asked for (§ 25(2) no. 2 TDDDG).
How long
Unconfirmed entries are deleted after 7 days. The list is deleted after the launch email has been sent. If you asked for the beta invite, that choice is kept until the beta invites have gone out. If you leave the list earlier, your entry stays marked as unsubscribed, so it gets no email and I can show what you had agreed to and when you withdrew; it is deleted together with the list.
Withdrawal
You can leave the list at any time with the link in every email after the confirmation, or by writing to [email protected]. Leaving does not affect what happened before.
Legal basis
Your consent, Art. 6(1)(a) GDPR, given by sending the form and confirming it. Keeping the record of that consent is based on my legal obligation to be able to prove it, Art. 6(1)(c) together with Art. 7(1) GDPR.
Contact by email
Mail to [email protected] is forwarded by Cloudflare Email Routing to my personal mailbox. I use your address and your message only to answer you. Legal basis is Art. 6(1)(f) GDPR, my interest is answering your request. If your message is about a contract with me, Art. 6(1)(b) GDPR applies. I delete the conversation once it is finished, unless I have to keep it by law.
Contact form
The form on /contact asks for your name, your email address and your message. On sending, a Cloudflare Worker turns them into an email to my personal mailbox, with your address as the reply address. Nothing is stored in a database. Legal basis and deletion are the same as for email.
Spam protection with Cloudflare Turnstile
The contact form and the waitlist form use Cloudflare Turnstile (challenges.cloudflare.com) to tell people from bots. Its script loads on the contact page when the page opens, and on the start page only when you click or tap into a waitlist form. It runs invisibly. For this, Cloudflare processes your IP address, the TLS fingerprint and user agent of your browser, and further technical signals from your browser and device. This site itself sets no cookies for this. Inside the Turnstile frame, Cloudflare may store or read information on your device as far as bot detection needs it. When you send a form, the result of the check and your IP address go to Cloudflare once more to confirm it.
Legal basis is Art. 6(1)(f) GDPR, my interest is keeping spam and fake signups out of the forms. Storing or reading information on your device is strictly necessary for the form you chose to use (§ 25(2) no. 2 TDDDG). The script is not loaded anywhere else. If you do not want it, write to me by email instead.
For the check itself, Cloudflare acts as my processor. Cloudflare also uses these signals as a controller of its own to improve its bot detection. The transfer to the USA works as described under Hosting. Details are in Turnstile's privacy addendum.
Links to other sites
The link to louisfriedrich.dev is a plain link. Nothing is loaded from there until you click. After that, that site's own privacy policy applies.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw a consent at any time with effect for the future (Art. 7(3)). Where I rely on Art. 6(1)(f), you can object to the processing on grounds relating to your particular situation (Art. 21). An email to [email protected] is enough.
You can also complain to a data protection authority, for example the one responsible for me: Berliner Beauftragte für Datenschutz und Informationsfreiheit, datenschutz-berlin.de.
Changes
If the site changes, this page changes with it. Last updated: September 2026.