Privacy Policy
Last updated: 31 July 2026
This policy covers the website 52n34s.app. The apps published under 52N34S each have their own privacy policy on their own domain.
1. Controller
Steffen Giebler — 52N34S Group
Schwedter Str. 25, 10119 Berlin, Germany
Email: privacy@52n34s.com
We are not required to appoint a Data Protection Officer under Art. 37 GDPR.
2. In short
This site has no analytics. No Google Analytics, no Vercel Analytics, no PostHog, no advertising SDK, no tracking across sites, and no sale of data.
It sets no cookies for advertising, analytics or cross-site tracking, and stores nothing on your device beyond what is technically required to serve the page. There is therefore no consent banner: § 25 TDDDG is not triggered, because there is nothing to consent to.
Personal data reaches us in exactly one situation: when you fill in the contact form. Everything else described below is standard server operation.
3. Contact form
When you send the contact form, we store the name and email address you enter, the project type you select, and your message. The data is stored in a database hosted by Supabase in the EU region.
A notification email is delivered through Resend so that we see your enquiry. Your message content is part of that email.
Legal basis: Art. 6(1)(b) GDPR where your enquiry concerns a possible working relationship, and Art. 6(1)(f) GDPR — our legitimate interest in answering enquiries addressed to us.
Retention: 12 months after the matter is closed, unless a working relationship comes out of it, in which case statutory retention periods apply. You can ask us to delete your enquiry earlier at any time.
We do not use your address for newsletters or marketing. There is no mailing list on this site.
4. Operating the site
4.1 Hosting
The site is hosted by Vercel. Standard server logs — IP address, timestamp, requested URL, referrer, browser and operating system — are processed as part of hosting operations, for security, troubleshooting and abuse prevention. These logs are not merged with other data and are not used to identify you.
Legal basis: Art. 6(1)(f) GDPR.
4.2 DNS and content delivery
Domain resolution and traffic routing run through Cloudflare. In this role Cloudflare processes connection data including your IP address in order to route the request and to filter malicious traffic.
Legal basis: Art. 6(1)(f) GDPR — secure and reliable delivery of the site.
4.3 Fonts
Web fonts are bundled when the site is built and served from our own domain. Your browser makes no request to Google Fonts or any other font provider, and no IP address is transmitted to a font provider.
4.4 Outbound links
This site links to external destinations including the Apple App Store, Google Play, Instagram, Upwork and the websites of the apps published under 52N34S. Once you follow such a link, the privacy policy of that destination applies. We have no influence over what happens there and receive no data back.
5. Legal bases at a glance
| Processing | Legal basis |
|---|---|
| Contact form | Art. 6(1)(b), (f) |
| Notification email | Art. 6(1)(f) |
| Server logs | Art. 6(1)(f) |
| DNS and routing | Art. 6(1)(f) |
6. Processors and recipients
| Service | Purpose | Location |
|---|---|---|
| Supabase Inc. (US) | Contact form database | EU region; DPA in place |
| Resend Inc. (US) | Notification email | US; DPA in place |
| Vercel Inc. (US) | Hosting | US / EU edge; DPA in place |
| Cloudflare Inc. (US) | DNS, content delivery | Global edge; DPA in place |
7. International data transfers
Some of the providers above are based outside the EEA or have a US parent company. Where personal data is transferred to the United States, we rely on the EU-U.S. Data Privacy Framework where the recipient is certified under it, and otherwise on the European Commission’s Standard Contractual Clauses. You can request a copy of the relevant safeguards at privacy@52n34s.com.
8. Retention
| Data | Retention |
|---|---|
| Contact form enquiry | 12 months after the matter is closed |
| Notification email | Until deleted from the mailbox |
| Server logs (Vercel) | Approximately 30 days |
9. Your rights
Under the GDPR you have the right to:
- access your data (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data erased (Art. 17)
- restrict processing (Art. 18)
- receive your data in a portable format (Art. 20)
- object to processing based on legitimate interest (Art. 21)
- lodge a complaint with a supervisory authority (Art. 77), in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement
To exercise any of these, write to privacy@52n34s.com.
Competent supervisory authority for us:
Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI)
Alt-Moabit 59–61, 10555 Berlin
10. Children
This site is not directed at children under 16, and we do not knowingly collect data from children under 16. If you believe a child has provided us with data, write to privacy@52n34s.com and we will delete it promptly.
11. Changes to this policy
We update this policy when the site or the services behind it change. The current version is always available at 52n34s.app/privacy.