Even

Even website

Privacy policy (website)

As of: August 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Sebastian Taatz Consulting UG (haftungsbeschränkt)

Raiffeisenstraße 2

97209 Veitshöchheim

Germany

E-mail: datenschutz@evenapp.app

Phone: +4915567113162

Data protection contact: Sebastian Taatz

2. Overview of processing

The following overview summarises the types of data processed, the purposes of processing, and the categories of data subjects concerned.

Types of processed data:

  • Usage data (e.g. visited pages, access times)
  • Metadata / communication data (e.g. IP address, browser type)
  • Content data (e.g. details entered in contact requests)
  • Contact data (e.g. e-mail address for newsletter sign-up)

Categories of data subjects:

  • Users (e.g. website visitors)

3. Applicable legal bases

Personal data is processed on the basis of the following legal grounds:

  • Consent (Art. 6(1)(a) GDPR)
  • Performance of a contract / pre-contractual measures (Art. 6(1)(b) GDPR)
  • Legitimate interests (Art. 6(1)(f) GDPR), in particular in the secure, stable, and user-friendly provision of the website

4. Security measures

We implement appropriate technical and organisational measures in accordance with Art. 32 GDPR in order to ensure a level of protection appropriate to the risk.

This includes, in particular, measures to safeguard the confidentiality, integrity, and availability of data as well as protection against unauthorised access.

The entire website is transmitted in encrypted form using SSL or TLS technology (HTTPS).

5. Provision of the online offer and web hosting

This website is provided via Netlify. Netlify processes technical access data to deliver the website, secure the infrastructure, and ensure availability. Interactive functions such as the contact form, newsletter, and waitlist are processed via Supabase Edge Functions.

  • Hosting provider: Netlify, Inc.
  • Backend for website functions: Supabase
  • Processing locations: With global hosting and CDN infrastructure, personal data may be processed outside the EU/EEA.
  • Netlify transfers: For restricted transfers from the EEA, Netlify identifies the EU-US Data Privacy Framework as the primary transfer mechanism. Where it does not apply, the EU Standard Contractual Clauses apply.
  • Supabase transfers: The Supabase Data Processing Addendum incorporates the EU Standard Contractual Clauses for transfers covered by them.

Provider information: Netlify Data Processing Agreement and Supabase Data Processing Addendum

Data collected when accessing the website (server logs)

  • anonymised IP address
  • date and time of access
  • name and URL of the retrieved file
  • referrer URL
  • browser type and operating system
  • name of the access provider

Server-side website statistics with Netlify Web Analytics

When Netlify Web Analytics is enabled, aggregated page views, top pages, and referrers are evaluated from CDN or server logs. Netlify does not require additional browser analytics code or analytics cookies for this.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reach measurement, security, and optimisation). Cookie consent is not required for this because no information is stored on or read from the end device for statistics purposes.

Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in the technical provision, security, and stability of the website)

6. Cookies and local storage

We use your browser's local storage only for user-facing preferences such as language, display mode and form of address. Netlify Web Analytics and Simple Analytics are used without optional analytics, advertising or remarketing cookies, so no cookie banner is displayed.

localStorage

1. Language preference

  • Name: even-locale
  • Purpose: storing the last selected language so matching content and links can be shown
  • Storage period: until manually deleted by you
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a user-friendly presentation)

2. Preferred form of address

  • Name: even_tonality
  • Purpose: storing the preferred form of address for a personalised user experience
  • Storage period: until manually deleted by the user
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a user-friendly presentation)

3. Display preference

  • Name: even-stitch-theme
  • Purpose: storing the selected display mode (system, light or dark)
  • Storage period: until manually deleted by you
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a user-friendly presentation)

These entries are stored first-party on your device only and are not used for tracking, profiling or advertising. You can delete them at any time in your browser settings.

7. Integration of external services

Fonts (hosted locally)

This website uses fonts (including Lora and Roboto) that are hosted locally on our server.

No connection to servers of external providers is established and no data is transferred to third parties.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a consistent presentation of the online offer)

Cookie-free statistics with Simple Analytics

We use Simple Analytics (Simple Analytics B.V.) for aggregated page views, fixed link events for the App Store, Play Store, web app, email, phone, download and other external links, and fixed conversion events such as opening the waitlist and successful or failed form submissions. It loads asynchronously after the page has rendered and via first-party paths.

  • no cookies, local storage or session storage for statistics purposes
  • no IP address storage by Simple Analytics
  • no fingerprinting, user IDs, device IDs or advertising profiles
  • no form content, names, tokens or group information is transmitted
  • no link targets, domains, email addresses, phone numbers, filenames, link texts or page titles are transmitted as event metadata
  • Do Not Track signals are not overridden

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in cookie-free reach measurement and improving the website). Cookie consent is not required because Simple Analytics does not set analytics cookies and does not store comparable information on the end device.

Services not used

This website does not use:

  • session replay services
  • social media pixels
  • advertising or retargeting services

8. Newsletter

The following data is collected when signing up:

  • E-mail address (required)
  • First name (optional)
  • Preferred form of address (optional)

Purpose: sending newsletter content and information about Even

Legal basis: Art. 6(1)(a) GDPR (consent)

Double opt-in procedure

Registration takes place via a double opt-in procedure. You first receive a confirmation e-mail with a link to verify your registration.

Storage period:

  • Unconfirmed registrations are automatically deleted after 7 days
  • Confirmed registrations are stored until withdrawal

Unsubscribe: You can unsubscribe at any time with one click. A corresponding link is included in every e-mail.

9. Sending e-mails

E-mails (newsletters, confirmation e-mails, and contact form messages) are sent via the Resend service.

Service provider: Plus Five Five, Inc. (Resend)

Transferred data:

  • E-mail address
  • First name (if provided)
  • E-mail content and technical delivery metadata
  • for contact requests also name, subject, and message

Transfer: Resend and its subprocessors may process data outside the EU/EEA. This is based on appropriate safeguards, in particular the Data Processing Addendum and its transfer mechanisms.

Legal basis: Art. 6(1)(a) GDPR (consent) in conjunction with Art. 28 GDPR (processing under instruction)

Further information: resend.com/legal/privacy-policy and resend.com/legal/dpa

10. Contacting us

When you contact us via the form or by e-mail, the following data is processed:

  • Name
  • E-mail address
  • Subject
  • Message content
  • IP address for short-term rate limiting in the contact form

Purpose: processing the enquiry

Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR

Processing: contact form messages are validated via a Supabase Edge Function and delivered to us via Resend. They are not stored permanently in a website database for this purpose.

Storage period: until the enquiry has been fully resolved and in accordance with statutory retention obligations

11. Storage period

Unless a more specific storage period is stated in this Privacy Policy, we process and store personal data only for as long as necessary to achieve the respective purposes or for as long as statutory retention periods apply.

12. Obligation to provide data

Providing personal data is neither legally nor contractually required.

However, without providing certain data (e.g. e-mail address when contacting us or subscribing to the newsletter), enquiries or registrations cannot be processed.

13. Automated decision-making

Automated decision-making, including profiling pursuant to Art. 22 GDPR, does not take place.

14. Rights of data subjects

Data subjects have the following rights in particular:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Withdrawal of granted consent
  • Lodging a complaint with a supervisory authority

15. Competent supervisory authority

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 18

91522 Ansbach

Germany

16. Privacy in the app

This Privacy Policy applies to the website evenapp.app.

A separate Privacy Policy applies to the mobile app "Even", which is also available on this website.

Go to the App Privacy Policy ->

17. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy to reflect legal or technical changes.

The current version can be accessed on this website at any time.

Questions about data protection?

If you have questions about the processing of personal data or about exercising your rights, please contact:

datenschutz@evenapp.app