Privacy Policy

Contact and inquiries

When you use the contact, Software Rescue or Product Sparring forms or email us, we process the contact details and inquiry information you provide to respond to your request. The legal basis is Art. 6(1)(b) GDPR for pre-contractual inquiries and otherwise Art. 6(1)(f) GDPR. We use Google Gmail to send and receive email; data may also be processed outside the EEA. The provider’s privacy information and applicable transfer safeguards apply.

We delete inquiries when they have been handled and further retention is no longer necessary, subject to statutory retention obligations.

Innovation Circle and idea features

For Innovation Circle registration we process your name, email and any topic you provide to handle your registration and send information about the Innovation Circle. You receive an email confirmation; the confirmation link is valid for 48 hours. For comments, expressions of interest and likes on ideas, we process the information you submit. Registrations and contributions are stored on the server infrastructure and deleted when no longer needed for their purpose or when you request erasure, subject to legal retention obligations. Depending on the request, the legal basis is Art. 6(1)(b) or (f) GDPR; emails requiring consent are based on Art. 6(1)(a) GDPR.

StatRace (statrace.moinsen.dev)

StatRace is a moinsen tool that turns statistics into animated bar chart race videos. It runs mostly in your browser. We only process personal data in the cases below. Questions about StatRace: [email protected].

Use in the browser

• StatRace keeps API keys and projects only in your browser (localStorage, IndexedDB). They are not sent to moinsen.
• If you research with your own API key, your browser sends the request directly to the provider you chose (Anthropic or OpenAI). That provider’s privacy policy applies; moinsen receives neither the request nor the key.
• A local model processes your request on your own computer. Its research tools fetch public data from ourworldindata.org and wikipedia.org.

Public gallery: submissions

• When you submit a project, we store the dataset (topic, title, numbers, event texts, sources, music parameters), the names of the AI models that researched and reviewed it, and, where applicable, our decision with its reason. There are no user accounts.
• Before you submit, the AI you set up in StatRace (your own API key, your local model or your own subscription) reviews the entry against the gallery rules. This review runs directly between your browser and your provider; moinsen receives no data from it and runs no AI of its own.
• To limit abuse, we count submissions per day. For this we process your IP address only as a hash of the address, the date and a secret value; we do not store the IP address itself. The hash is deleted the following day at the latest. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protection against spam and abuse.
• If you withdraw an entry, we delete it at once. We delete rejected or removed entries after 30 days. Published entries stay online until they are withdrawn or removed.

Public gallery: reports

• When you report an entry, we process your reason and, if you provide them, your name and email address. Name and email address are optional; we use them only to confirm receipt and to tell you the decision. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 16 of Regulation (EU) 2022/2065 (Digital Services Act).
• The reported entry is hidden at once. A person at moinsen reviews the report and decides; there is no automated decision.
• We send you the confirmation and the decision through the email service Resend. moinsen receives a note about the report without your name and email address. We delete your name and email address from the gallery database as soon as you have been told the decision; we delete the report itself 30 days after it was handled.
• For the daily limit on reports, we process the IP address only as a hash, as for submissions.

Service providers

• Cloudflare, Inc. (USA): hosting of StatRace and the gallery database (Cloudflare Pages, Cloudflare D1). Cloudflare processes connection data such as IP addresses.
• Resend, Inc. (USA): sending the emails about reports.
• These providers process the data on our behalf (Art. 28 GDPR). Transfers to the USA rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

You have the right to access, rectification, erasure and restriction of processing, to data portability, to object to processing based on Art. 6(1)(f) GDPR, and to lodge a complaint with a data protection supervisory authority.

StatRace gallery rules and point of contact

Newsletter

• Controller: Ulrich Diedrichsen, Kippingstraße 27, 20144 Hamburg, Germany, [email protected].
• When you subscribe, we store your email address, signup and confirmation times, status, consent text version and a hash of the confirmation link. We do not store IP addresses in the newsletter list or measure opens or clicks.
• Double opt-in: you first receive a confirmation link valid for seven days. Unconfirmed signups are cleaned up automatically at regular intervals after expiry. At most three confirmation mails are sent per address.
• Content: new blog posts, insights into my projects and occasionally news about moinsen's own products and offers, at most about once a month.
• The legal basis is your consent (Art. 6(1)(a) GDPR). We keep the proof of consent for as long as you are subscribed (Art. 7(1) GDPR).
• Processors: Cloudflare, Inc. (storage of the list, Western Europe data centre) and Resend (Plus Five Five, Inc., San Francisco, USA) for sending. Transfers to the USA are based on the EU standard contractual clauses and the EU-US Data Privacy Framework.
• Cloudflare database recovery backups may contain deleted entries for a limited period.
• You can withdraw at any time via the unsubscribe link in every mail or by writing to [email protected]. Your address is deleted from the newsletter list. Resend states that email data and delivery logs are retained for 30 days on Free, Pro and Scale plans; backups or statutory retention obligations may be subject to different periods.