Privacy notice

Controller and contact

Denis Thiel Albatrosweg 30 50259 Pulheim Germany Phone: +49 151 67104249 Email: security@anywhat.app

Website and hosting

This notice applies to the public anywhat website. The website is hosted on a server provided by STRATO GmbH, Germany. STRATO processes hosting data on our behalf. Hosting is necessary to deliver the website reliably and securely. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in providing and protecting this website.

When you access the website, your IP address, the requested URL, access time and technical connection information are processed to deliver the page and maintain security. Separate services linked from this website may have their own privacy notices.

Technical data and retention

We do not enable a separate access log for this landing page. Operational messages may be recorded to diagnose errors and protect the server. Container logs are limited to three files of up to 10 MiB each; these size limits are not a fixed retention period. We do not use these messages for visitor analytics. STRATO may process technical infrastructure data under its own hosting terms and privacy information.

Waitlist data and abuse-prevention records have the separate retention periods described below. Contact security@anywhat.app for privacy questions.

Cookies, fonts and animation

This website uses no analytics, advertising tracking or cookies. Fonts are served from our own server. The thread animation and its mouse interaction run locally in your browser; mouse movements are not stored or sent to us. You can pause the animation. Reduced-motion preferences are respected.

Opening the waitlist form requests a short-lived anti-abuse token from our own server. No third-party CAPTCHA service is used. The form does not store your details in browser storage.

Waitlist and contact

If you join the waitlist, we process your name and email address. Company is optional. With your consent, we email you about the anywhat launch and your access. This is not a general newsletter. The legal basis is Article 6(1)(a) GDPR. Consent is voluntary; you may withdraw at any time by emailing security@anywhat.app, without affecting processing carried out before withdrawal. You can use the website without signing up.

We first send a confirmation email. You only join the waitlist when you open the link and explicitly confirm your signup. We record the request and confirmation times and the consent version. Unconfirmed requests are deleted after 24 hours. Confirmed entries are deleted when the signup purpose has been fulfilled or you withdraw, and no later than twelve months after confirmation. Confirmed signups are delivered to our waitlist@anywhat.app mailbox. Confirmation and notification emails are sent using STRATO Mail. Signup data stored on the server is encrypted; email submission to STRATO uses TLS. The independent form service does not share data with the SaaS or CMS.

To prevent automated abuse, we use an invisible extra field, a short minimum completion time and request limits. Your IP address is briefly processed for these checks; only a keyed identifier is retained for rate limits, not the raw IP address. Rate-limit identifiers expire after one hour; form tokens expire within 30 minutes. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in protecting the form and preventing unwanted email.

If you contact us, we process your email address and message to handle your request (Article 6(1)(f) GDPR, or Article 6(1)(b) GDPR for pre-contractual enquiries). Messages, including confirmed signups in the mailbox, are deleted when their purpose ends or consent is withdrawn, unless statutory retention duties apply. For privacy questions and requests, contact security@anywhat.app.

Your rights

Subject to the applicable legal requirements, you have the right to access, rectify or erase your personal data, restrict processing and receive data in a portable format. You may object to processing based on legitimate interests and withdraw consent at any time. Contact security@anywhat.app to exercise your rights.

You also have the right to lodge a complaint with a data protection supervisory authority, including the authority in your usual place of residence, place of work or the place of an alleged infringement.