Privacy policy

This page is a scaffold. Fields shown in [square brackets] are placeholders and must be replaced with verified, real details before this page goes live. The cookie table below, by contrast, already reflects the application's actual current state.

Data controller

[Company name] [Street and house number] [Postal code and city] Email: [email address] If applicable: Data protection officer: [name, contact — if appointed]

General information on data processing

When you visit this website, our hosting provider automatically collects technical access data (server log files) required to deliver the site and defend against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, functioning operation). This data is not combined with other data sources.

Hosting and data processors

[Add details on the hosting provider, server location, and, where applicable, the data processing agreement — in particular for Supabase, which this application uses as its database and authentication service.]

Account, sign-in and project data

Registering processes your email address and password (or the credentials of your chosen sign-in method), as well as the project and value-stream data you create while using the product. The legal basis is Art. 6(1)(b) GDPR (performance of the usage agreement). [Add retention periods and further processor details.]

Your rights

You have the right to access, rectify, erase, restrict the processing of, receive a copy of, and object to the processing of your personal data, within the limits of the applicable law (Art. 15–21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority.

Contact for data protection matters

For access requests, corrections, deletions, or any other request concerning your data, contact: [email address].

Cookies

This table lists every cookie this application sets. Necessary cookies serve only the technical operation of the site and are set without consent (Art. 6(1)(f) GDPR / § 25(2) TTDSG). For the one cookie that is not necessary — marketing attribution — we ask for your consent beforehand (Art. 6(1)(a) GDPR, § 25(1) TTDSG); you can withdraw or decline that consent at any time via the banner at the bottom of the screen.

NamePurposeDurationCategory
sb-*Keeps your sign-in session active so you aren't signed out on every page load.Session, or until the sign-in token expiresNecessary
NEXT_LOCALERemembers your chosen language (German/English).1 yearNecessary
vsm_consentStores your decision on this cookie banner so it doesn't reappear on every visit.180 daysNecessary
vsm_attrRemembers which campaign or referring source first brought you to the site (e.g. utm_source), to evaluate the effectiveness of marketing activities. Only set if you accept it in the banner.30 daysMarketing (with consent)