Privacy Policy

← Back to App

1. Data Protection at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Controller (Responsible Party)

Philipp Scholl
Hauptstraße 113
18320 Ahrenshagen-Daskow
Germany
Email: kontakt@cutforgepro.com

2. Website Provision and Hosting (Vercel)

We host our website with:
Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.

When you access our website, Vercel automatically collects server log files (e.g., IP address of the requesting device, date and time of access, requested URL, browser information, and operating system). This is technically necessary to deliver the website, prevent cyber attacks, and maintain system stability.

  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and performant delivery of the web application).
  • Data transfer: Data transfers to the US are based on standard contractual clauses (SCCs) of the European Commission and the EU-U.S. Data Privacy Framework. We have entered into a Data Processing Addendum (DPA) pursuant to Art. 28 GDPR with the provider.

3. Web Analytics without Cookies (Vercel Analytics)

We use Vercel Analytics (Vercel Inc.) to analyze aggregated traffic and performance.

Vercel Analytics operates completely without cookies, does not store any local data on your device, and does not create individual user profiles. IP addresses are immediately anonymized upon receipt. Only aggregated metrics are collected (such as visited pages, visit duration, country of origin, and device category).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring and optimizing the performance and usability of our web service). As no data is stored or accessed on user devices, no consent banner is required for Vercel Analytics.

4. Local Browser Storage (localStorage)

For the tool to function properly, certain data is saved locally in your browser storage (localStorage): your project files, sheet specifications, workpiece lists, last computed layout, and technical flags (such as whether sample projects have been loaded). This data never leaves your device, is not used for advertising or tracking, and contains no email addresses.

Legal basis: § 25(2) No. 2 TDDDG (strictly necessary to provide the service explicitly requested by the user) and Art. 6(1)(f) GDPR. You can delete this data at any time via your browser settings.

5. Anonymous Usage Statistics (Click Events)

To understand which features are most useful, we collect anonymous usage events (e.g. clicks such as "Calculate" or "New project", interactions with PRO feature previews, export actions, and cookie choices). Recorded data includes only: event type, trigger element, timestamp, device category (mobile/desktop), and a random session ID that exists only in temporary browser memory and resets on reload.

  • No cookies are placed, no user profiles are generated, and no IP addresses are stored. Your actual workpiece dimensions, project names, and cut list details are never logged in analytics.
  • Events are routed through our servers and stored in Supabase (datacenter Frankfurt am Main, Germany). No data is shared with ad networks.
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the quality and usability of our software).

6. Cookie Consent & Google Ads Conversion Tracking

We use a consent banner. The technical cookie cc_cookie stores your preference for 182 days (approx. 6 months). Legal basis: § 25(2) No. 2 TDDDG and Art. 6(1)(f) GDPR.

Only with your explicit consent, we utilize Google Ads Conversion Tracking (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland / Google LLC, USA) to measure whether an advertisement led to an early-access reservation. Google sets tracking cookies (_gcl_*). Your email address is never sent to Google.

We implement Google Consent Mode v2 in Basic mode: without your consent, no Google scripts are loaded and no data is transmitted to Google. Even with consent, remarketing and personalized advertising are strictly disabled.

  • Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (Consent).
  • Revocation: You can modify or revoke your consent at any time via the "Cookie Settings" button in the footer.

7. Early Access to PRO Features & Double Opt-in

When you sign up for early access to PRO features or request notification about an upcoming tool, we collect your email address. Registration requires active opt-in via a separate checkbox.

We employ a Double Opt-in procedure: after registering, you receive a confirmation email with a verification link. Your reservation is only activated once you click this link. We record the timestamp (confirmed_at) for legal compliance.

  • Legal basis: Art. 6(1)(a) GDPR (Consent) and Art. 6(1)(b) GDPR (pre-contractual measures).
  • Unsubscribe: You can unsubscribe at any time with one click using the unsubscribe link in any email or by emailing kontakt@cutforgepro.com.

8. Service Providers for Early Access

Database & Storage: Supabase

To manage registration data, we use Supabase (Supabase Inc., 970 Toa Payoh North #07-04, Singapore / Datacenter: AWS Frankfurt am Main, Germany). Data is stored within the EU on ISO-27001 certified infrastructure with a Data Processing Addendum (Art. 28 GDPR).

  • Stored data includes your email address, registration timestamp, double opt-in confirmation status, marketing consent choice, signup source (e.g. requested feature and priority), unsubscribe timestamp, and – only if answered voluntarily – your responses to the follow-up questions (business type, monthly sheet volume, current tools, feedback notes, interview willingness). Anonymous click statistics from Section 5 are stored separately without any connection to your email address.
  • Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR.

Transactional Email: Resend

To deliver double opt-in confirmation emails, we use Resend (Resend Inc., San Francisco, CA, USA) under standard contractual clauses and a DPA.

9. Email Communication & Domain Management (United Domains)

When you contact us by email, your message and contact details are stored to process the request. Domain services and email routing are provided by united-domains AG (Starnberg, Germany) under Art. 28 GDPR.

10. Storage Duration

  • Early access registration: Until consent is withdrawn or notification purpose ends.
  • Anonymous usage statistics: Automatically deleted after 12 months.
  • Consent cookie: 182 days.
  • Local browser storage: Until you clear your browser cache.

11. Your Rights under the GDPR

Under the European General Data Protection Regulation (GDPR), you have the right to:

  • Access (Art. 15 GDPR): Obtain confirmation and information regarding your processed data.
  • Rectification (Art. 16 GDPR): Request correction of inaccurate personal data.
  • Erasure (Art. 17 GDPR): Request deletion of your personal data.
  • Restriction (Art. 18 GDPR): Request restriction of data processing.
  • Data Portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
  • Withdraw Consent (Art. 7(3) GDPR): Revoke consent at any time with future effect.
  • Object (Art. 21 GDPR): Object to processing based on legitimate interests (Art. 6(1)(f) GDPR).
  • Lodge a Complaint (Art. 77 GDPR): Right to lodge a complaint with a supervisory data protection authority (usually the authority of your habitual residence or our registered office: The State Commissioner for Data Protection and Freedom of Information Mecklenburg-Vorpommern).