Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Florian Kirchner
Antonia-Kozlova-Straße 9
22763 Hamburg
Germany
Email: admin@opaopa.app

Protecting your personal data is important to us. We process personal data (e.g. email address, IP address) exclusively in accordance with the GDPR and the German Federal Data Protection Act (BDSG). This privacy policy informs you about the nature, scope, and purpose of the processing of personal data on this website.

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (“Vercel”). When you visit the website, Vercel processes technical access data on our behalf (see “Server log files”). The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure, stable, and efficient provision of our online offering. A data processing agreement (Art. 28 GDPR) is in place with Vercel. Insofar as data is transferred to the USA, this is done on the basis of appropriate safeguards (EU Standard Contractual Clauses or the EU–US Data Privacy Framework).

When you access this website, information transmitted by your browser is automatically collected. This includes in particular: browser type and version, operating system used, referrer URL, date and time of the request, and the (possibly shortened) IP address. This data is used for the technical provision and security of the website and is not merged with other data sources. The legal basis is Art. 6 (1) (f) GDPR.

On our website you can join the waitlist with your email address in order to be informed about early access and the launch of opaopa.

Data processed: email address, as well as the time of sign-up and confirmation. To document your consent, the IP address used at the time of sign-up or confirmation is also stored.

Double opt-in: After you sign up, we send you an email containing a confirmation link. Your entry only becomes active after you click this link. This ensures that the sign-up actually originates from you.

Purpose: sending information about the product launch, early access, and related news about opaopa.

Legal basis: your consent pursuant to Art. 6 (1) (a) GDPR.

Withdrawal: You can withdraw your consent at any time with effect for the future, e.g. via the unsubscribe link in any email or by message to admin@opaopa.app. The lawfulness of the processing carried out until withdrawal remains unaffected.

Storage period: We store your data until you unsubscribe or withdraw your consent. After unsubscribing, the data is deleted; proof of the consent given may be retained within the legally permissible scope.

For the operation of the waitlist, we use the following service providers as processors (Art. 28 GDPR):

Supabase – storage of waitlist data. Provider: Supabase, Inc. (USA). The data is stored in a data center within the European Union (EU region). Insofar as a third-country transfer is involved, processing is carried out on the basis of appropriate safeguards (EU Standard Contractual Clauses).

Resend – sending confirmation and information emails. Provider: Resend, Inc. (USA). Emails are sent via the EU region (eu-west-1). Insofar as a third-country transfer is involved, processing is carried out on the basis of appropriate safeguards (EU Standard Contractual Clauses).

This website currently does not use any tracking or analytics cookies and no user tracking. Only technically necessary data required for the operation of the website is processed. Should we introduce (privacy-friendly, cookieless) analytics in the future, we will update this privacy policy accordingly.

Under the GDPR, you have the following rights:

• access to the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing (Art. 21 GDPR)
• withdrawal of consent given (Art. 7 (3) GDPR)

To exercise these rights, a message to admin@opaopa.app is sufficient.

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The authority responsible for us is:

The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI)
Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany
https://datenschutz-hamburg.de

For security reasons and to protect the transmission of confidential content, this website uses TLS encryption. You can recognize an encrypted connection by “https://” in your browser’s address bar.

Last updated: July 2026