Privacy policy

Controller

Dominik Ginting, Ginkaro
c/o IP-Management #12422, Ludwig-Erhard-Str. 18
20459 Hamburg
Germany

Email: hello@asodeck.com

In short

ASODeck doesn't measure visitors: no analytics, no tracking, no ads, no third-party cookies. Fonts, images and videos on this website come from our own server. We process data only to deliver the website, run the waitlist and provide your account.

Hosting and server logs

The website runs on Vercel Inc. (USA). With every request Vercel processes technically necessary data: IP address, time, requested address, browser and operating system. It serves delivery and security (fending off attacks) and is deleted after a short time. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

Transfers to the USA are covered by the EU-US Data Privacy Framework where the provider is certified, otherwise by the European Commission's standard contractual clauses. This also applies to the other US-based providers named below.

Cookies and browser storage

We only set cookies that are needed for operation (§ 25(2) no. 2 TDDDG): while early access is protected, a cookie for access (30 days); after signing in, the session cookie (30 days) and short-lived sign-in cookies; with an invitation, a cookie holding its code (1 hour), so it survives signing in with GitHub or Google.

In your browser's storage (localStorage) we keep settings such as light/dark. They don't leave your browser.

Waitlist

When you join the waitlist of ASODeck, we store your email address and when you signed up, confirmed, were invited and redeemed the invitation, as well as your place in line, a code for your personal referral link and the number of confirmed sign-ups through that link. We use the address for the waitlist only: to confirm your sign-up, to invite you and to send you news about the launch of ASODeck.

The legal basis is your consent (Art. 6(1)(a) GDPR). You give it with the link in the confirmation mail (double opt-in); entries that are not confirmed are deleted after 14 days. You can withdraw your consent at any time with effect for the future, through the unsubscribe link in every mail or by writing to hello@asodeck.com. Your entry is then deleted completely.

The invitation contains a personal code that is valid for 30 days and only once. When you create an account with ASODeck using it, we check the code with the waitlist, which marks it as redeemed. To do so we match it against the addresses GitHub or Google have verified for your account.

The waitlist is run for us by NearlyIn (Dominik Ginting, Ginkaro, Hamburg) as a processor under Art. 28 GDPR. Servers and database are in Frankfurt am Main, Germany. NearlyIn uses Vercel, Neon and Resend (all based in the USA) as sub-processors; they and the safeguards for transfers to the USA are listed in the data processing agreement at nearlyin.com/avv. Where you came from to sign up (utm_source or the website before) is only counted as a number per day and not stored with your entry.

Account and sign-in

You sign in with GitHub (GitHub Inc., USA), Google (Google Ireland Ltd.) or a link by email. From GitHub and Google we receive an identifier of your account, your name and your verified email addresses; we never see passwords. With the same verified address you always land in the same account, so we store which sign-ins and addresses belong to your account.

We send the email link through Resend Inc. (USA). It works for 15 minutes and once; we store only a hash of the link, the address and the time.

In your account we store what you create: apps, decks, images and videos, store copy, promo sets, guidelines and the history of your changes. The data is kept in a database at Neon Inc. (USA) and, for images and videos, in Vercel's storage. What you delete stays in the trash for 7 days and is then deleted for good. The legal basis is providing the service you use (Art. 6(1)(b) GDPR).

When you connect an agent (such as Claude), we store its keys or access and, per call, the tool, time and result: for your history and for the limits of your plan. What your agent itself does with the data is governed by your agent's provider.

Mac app

The Mac app stores everything on your Mac. It only asks this website for the newest version number; as with any request, the IP address appears in the server logs.

Email to us

When you write to hello@asodeck.com, we use your message and address to reply (Art. 6(1)(b) or (f) GDPR). The domain provider Namecheap Inc. (USA) forwards the mails to our inbox.

Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests and to withdraw consent. Write to hello@asodeck.com for any of this.

You can also lodge a complaint with a supervisory authority, for example: Der Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover.