Privacy Policy

This is an English translation provided for convenience. The German version is the legally binding one.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

WildcardTech GmbH
Lacombletstraße 29
40239 Düsseldorf
Germany
E-mail: hello@spotnote.ninja

2. General information on data processing

We only process personal data of our visitors to the extent necessary to provide a functioning website. This website does not use cookies; fonts are served locally from our own server. Third-party content is only loaded after your active consent (see section 5). For reach measurement we use a self-hosted, cookie-less analytics tool (see section 4).

3. Hosting and server log files

This website runs on WildcardTech GmbH's own infrastructure. When you visit the website, the server automatically collects information in so-called server log files that your browser transmits:

• IP address of the requesting device
• date and time of access
• requested page or file
• amount of data transferred and status code
• browser type and version, operating system
• referrer URL

This processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technical delivery, stability and security of the website. Log files are automatically deleted after a short period unless security-relevant incidents require longer retention.

4. Web analytics with Plausible (self-hosted)

To understand which content is used, we employ the open-source analytics software Plausible Analytics — operated on WildcardTech GmbH's own infrastructure at analytics.wildcardtech.de. No data is transferred to third parties.

Plausible works without cookies and does not store personal data. Only aggregated usage data is collected: pages visited, referrer, approximate origin (country), device type and clicks on external links. The IP address is only processed transiently to derive a daily-changing, non-reversible identifier and is not stored; identifying individual visitors or tracking them across sites is therefore ruled out. The legal basis is our legitimate interest in measuring the reach of our offering (Art. 6 (1) (f) GDPR).

5. YouTube video (click-to-load)

Our landing page features an explainer video hosted on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the enhanced privacy mode (youtube-nocookie.com) and only load the video once you actively press "Play video". Until then, no connection to YouTube is established and no data is transferred.

By pressing play you consent to a connection being established with YouTube's servers. Your IP address, the page visited as well as browser and device information are transmitted to YouTube; YouTube may set its own cookies and — if you are signed in to your Google account — associate the visit with that account. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG), which you can withdraw for the future by reloading the page. Further information is available in Google's privacy policy atpolicies.google.com/privacy.

6. Contact by e-mail

If you contact us by e-mail, we process the data you provide (e-mail address, content of the message) in order to answer your inquiry. The legal basis is Art. 6 (1) (b) GDPR where the inquiry relates to entering into a contract, and otherwise Art. 6 (1) (f) GDPR. The data is deleted once it is no longer required for processing the inquiry and no statutory retention obligations apply.

7. Disclosure of data

Your data is not transferred to third parties unless we are legally obliged to do so or the transfer is necessary for the performance of a contract.

8. Your rights

As a data subject, you have the following rights:

• access to the data processed (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR) — either at your habitual residence or at our registered office — the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

9. Changes to this privacy policy

We reserve the right to adapt this privacy policy when the legal situation or our data processing changes. The version published here applies.

Last updated: August 2026