Privacy Policy
Last updated: 2 July 2026
1. Data controller
The controller for the processing of your personal data within the meaning of the GDPR is:
{{ADRESSE}}
Email: {{EMAIL}}
2. What data we process and why
2.1 Server log files
When you visit this website, our hosting provider automatically records technical access data in server log files. This includes:
- IP address of the requesting device (anonymised after a short period)
- Date and time of access
- Page requested
- HTTP status code
- Browser type and operating system (from the User-Agent header)
- Referring website (referrer), if transmitted
Purpose: Technical operation, security, and fault diagnosis.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation of the website).
Retention: Typically 7 to 30 days, then deleted automatically.
Provider: OVH SAS, 2 rue Kellermann, 59100 Roubaix, France (EU). Coolify is self-hosted open-source software.
2.2 Waitlist signup
When you join our waitlist, we process the following data that you voluntarily provide:
- First name
- Email address
- Time of consent
- Language of the signup form
Purpose: Notifying you when Kursnest launches and about relevant early-access offers.
Legal basis: Art. 6(1)(a) GDPR (your explicit consent when submitting the form).
Retention: Until you unsubscribe or request deletion, and no longer than 6 months after the Kursnest product launch.
Data processor: Supabase Inc., 970 Trestle Glen Rd, Oakland, CA 94610, USA. The database is operated in the EU region Frankfurt (AWS eu-central-1). Data transfers are covered by EU Standard Contractual Clauses (SCCs pursuant to Art. 46(2)(c) GDPR) and a Data Processing Agreement (DPA) with Supabase.
3. Cookies and tracking
This website does not use tracking cookies and does not employ any third-party analytics or advertising services (no Google Analytics, no Facebook Pixel, no equivalent service).
The web framework (Next.js) may use short-lived session data in server memory for technical operation. No persistent cookies are stored on your device unless you are logged in. No login is required to join the waitlist.
4. Disclosure to third parties
We do not share your data with third parties, except for the data processors named in section 2 and where we are legally required to do so.
5. Your rights
You have the following rights regarding your personal data:
- +Access (Art. 15 GDPR): You can request confirmation of whether and which data we hold about you.
- +Rectification (Art. 16 GDPR): You can request correction of inaccurate or incomplete data.
- +Erasure (Art. 17 GDPR): You can request deletion of your data, unless statutory retention obligations apply.
- +Restriction of processing (Art. 18 GDPR): In certain cases you can request that we restrict the processing of your data.
- +Data portability (Art. 20 GDPR): You can request to receive your data in a commonly used, machine-readable format.
- +Objection (Art. 21 GDPR): You can object to processing of your data where it is based on our legitimate interest.
- +Withdrawal of consent (Art. 7(3) GDPR): You can withdraw your consent to us using your email address at any time, for example by emailing us. This does not affect the lawfulness of processing carried out before withdrawal.
To exercise a right, simply email us at {{EMAIL}}. We respond within 30 days.
6. Right to lodge a complaint
If you believe that the processing of your personal data violates the GDPR, you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority. The competent authority is determined by your place of residence or the controller's registered address. A list of EU supervisory authorities is maintained by the European Data Protection Board (EDPB).
7. Changes to this privacy policy
We update this privacy policy when the legal situation changes or when we introduce new services that involve data processing. The current version is always available on this page. The date at the top shows when it was last updated.
Note: Provisional version
Fields marked {{...}} must be filled in before public launch. Until then, this website is not publicly accessible.