Privacy policy.

TenSeven UG (haftungsbeschränkt)
Im Bruch 8
27339 Riede
Germany
Email: hello(at)gopecia.com

Further legal information is in our Imprint.

This site runs no advertising and no cross-site tracking, and sets no cookies on its public pages. We measure visits with cookieless, aggregate analytics (section 4). Beyond that, processing of personal data is limited to what technically operating the site requires. You can use every public page without providing any personal data beyond what your browser transmits automatically.

This website is hosted by Vercel Inc., 650 California St, San Francisco, CA 94108, USA. When you access the site, Vercel processes the data your browser transmits: your IP address, date and time of the request, the requested URL, the referring page, and your browser and operating system (user agent). This data is processed to deliver the site and to ensure its stability and security. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in operating a secure, reliable website. Server logs are retained by Vercel for a short period and deleted automatically.

Vercel serves this site through a global edge network, so request data may be processed outside the EU/EEA. Transfers are safeguarded under Art. 46 GDPR (standard contractual clauses) and, where the provider is certified, the EU-U.S. Data Privacy Framework. A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel.

The public pages of this site set no cookies and embed no advertising or cross-site tracking technology. We use the browser's session storage for a single functional flag (whether an interface animation has already played in your session). It contains no personal data, never leaves your device, and is deleted when you close the tab. As storage that is strictly necessary for the service you request, it requires no consent (§ 25 (2) TDDDG).

To understand aggregate usage of the site we use Vercel Web Analytics, a cookieless analytics service of our hosting provider (section 3), served from this site's own domain. It records page views together with the visited URL, the referring page, country, browser, operating system and device type. Visitors are counted via a short-lived anonymous identifier derived from the incoming request, which cannot be linked across websites or days; no cookies are set and nothing is stored on or read from your device, so no consent under § 25 TDDDG is required. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in understanding how the site is used. The data is processed by Vercel under the agreement described in section 3.

All fonts, images and other assets are served from our own hosting — visiting this site triggers no requests to third-party font or media services.

Articles in our blog are stored with Supabase and delivered as part of this site. When you read the blog, your browser may connect to Supabase's API to load article content; Supabase then processes the technical request data described in section 3, as required to deliver the content you requested. Legal basis: Art. 6(1)(f) GDPR. Our Supabase project is hosted in the European Union, and a data processing agreement is in place with Supabase Inc.

The content-management area of this site (/superadmin) is a login-protected space used only by our team. Authentication there is provided by Clerk Inc. (USA), which sets cookies that are strictly necessary for the login session (§ 25 (2) TDDDG; Art. 6(1)(b) and (f) GDPR). Clerk is never loaded on the public pages — visitors to the website do not connect to Clerk.

If you contact us by email, we process your email address and the content of your message to handle your inquiry. Legal basis: Art. 6(1)(b) GDPR where your inquiry relates to a contract or pre-contractual steps, otherwise Art. 6(1)(f) GDPR. We keep correspondence as long as needed to handle the matter and any statutory retention periods that apply to it.

This site links to external websites — including links on blog articles that open the article in AI assistants such as ChatGPT, Claude, Gemini or Perplexity. Once you follow such a link, the privacy policy of the respective provider applies. We transmit no personal data to these providers; the link contains only the public address of the article.

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection — in particular against processing based on Art. 6(1)(f) (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future (Art. 7(3)). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77), for example at your habitual residence or at our registered office.

We use no automated decision-making and no profiling within the meaning of Art. 22 GDPR.

We will update this policy whenever the site starts processing personal data in new ways — for example, when demo-request or waitlist forms launch. The date at the top reflects the latest revision.