← Back

Privacy Policy

Last updated: March 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Mika Egelhaaf

c/o IP-Management #7766

Ludwig-Erhard-Str. 18

20459 Hamburg

Email: [email protected]

2. Data Collected & Purpose

When signing up for the waitlist, we collect exclusively your email address. By joining the waitlist you also consent to receiving our newsletter. We will use your email address to:

  • Notify you when Newsent launches and early access becomes available
  • Send occasional product updates, feature previews, and relevant news

We do not send spam. Emails are infrequent and always relevant to Newsent. You can unsubscribe at any time via the link in any email — no account required.

The legal basis is your explicit consent pursuant to Art. 6(1)(a) GDPR. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

3. Third Parties — Brevo (Email)

To manage the waitlist and send emails we use Brevo (Sendinblue SAS, 55 rue d'Amsterdam, 75008 Paris, France). Your email address is stored and processed on Brevo's servers.

A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with Brevo. Brevo is certified under the EU–US Data Privacy Framework. Further information: Brevo Privacy Policy.

4. Cloudflare (DNS & Bot Protection)

We use services of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) as our DNS provider and to protect against automated access.

As a DNS provider, requests to our domain are resolved via Cloudflare's infrastructure. Technical connection data (including IP address) may be processed in the process. The legal basis is our legitimate interest in the secure and reliable operation of our service pursuant to Art. 6(1)(f) GDPR.

To protect against automated sign-ups we additionally use Cloudflare Turnstile. Turnstile analyses user behaviour in the background without visible CAPTCHA challenges. IP address, browser and device information, and interaction data may be transmitted to Cloudflare.

A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with Cloudflare. Further information: Cloudflare Privacy Policy.

5. Hosting — Hetzner

This website is hosted by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). When visiting the website, technical access data (including IP address, browser, timestamp) is automatically recorded in server logs. This data is technically necessary for operating the website (Art. 6(1)(f) GDPR).

The servers are located within the European Union. A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with Hetzner. Further information: Hetzner Privacy Policy.

6. International Data Transfers

Some of the service providers named above (Cloudflare, Brevo) are based in or transfer data to the United States. These transfers are carried out on the basis of the EU–US Data Privacy Framework (DPF), an adequacy decision by the European Commission pursuant to Art. 45 GDPR. Both Cloudflare and Brevo are certified under the DPF, ensuring an adequate level of data protection equivalent to that within the EU.

7. Data Protection Officer

We are not legally required to appoint a Data Protection Officer. If you have questions about the processing of your personal data, please contact us directly at [email protected].

8. Cookies

This website does not set any tracking cookies of its own. Cloudflare Turnstile may set technically necessary cookies for bot detection. No advertising or analytics cookies are used.

9. Retention Period

Your email address will be stored until you withdraw your consent or until Newsent is discontinued — whichever comes first. After withdrawal, your email address will be deleted from our systems within 30 days.

10. Your Rights

Under the GDPR you have the following rights against us:

  • Access (Art. 15 GDPR) — what data we hold about you
  • Rectification (Art. 16 GDPR) — to have inaccurate data corrected
  • Erasure (Art. 17 GDPR) — to have your data deleted
  • Restriction (Art. 18 GDPR) — to restrict processing
  • Objection (Art. 21 GDPR) — to object to processing
  • Portability (Art. 20 GDPR) — to receive your data in machine-readable form
  • Withdrawal of consent (Art. 7(3) GDPR) — at any time without giving reasons

To exercise your rights, contact: [email protected]

You also have the right to lodge a complaint with a competent data protection supervisory authority. A list of all EU supervisory authorities is available at: edpb.europa.eu.