Privacy Policy

Last updated: 2026-05-08.

1. Controller

Vector5 GmbH
Keplerstraße 47, 40699 Erkrath, Germany
Email: hello@buddystack.io
Further details: Imprint.

2. Hosting (Cloudflare Pages)

This website is hosted on Cloudflare Pages, operated by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you access the site, Cloudflare processes technically necessary connection data (server log files), in particular:

• IP address of the requesting device
• Date and time of the request
• Requested URL and HTTP status code
• User agent (browser, operating system)
• Referrer (previously visited page, if transmitted)

This data is required to deliver the site, to ensure its stability and security, and to protect against attacks. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure operation of the website).

A data processing agreement under Art. 28 GDPR is in place with Cloudflare. Data may be transferred to the United States. Such transfer is based on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses. For further information: cloudflare.com/privacypolicy.

3. Web analytics (Cloudflare Web Analytics)

We use Cloudflare Web Analytics, a service operated by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), to measure aggregate visitor behaviour. Cloudflare Web Analytics is cookieless and does not use persistent identifiers. Only aggregated technical data is collected (e.g., requested page, referrer, browser type, approximate country-level location, page load timing). No individual visitor identification takes place. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in optimising our website).

A JavaScript snippet is loaded from static.cloudflareinsights.com. The data processing agreement with Cloudflare referenced in section 2 also covers this service; transfers to the United States are based on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses. More information: cloudflare.com/web-analytics.

4. SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by the "https://" prefix in your browser's address bar.

5. Waitlist signup

When you sign up to the waitlist, we transmit and store the following data on our hub backend (hosted in the EU):

• Email address
• IP address (for audit / abuse detection)
• User agent (for audit / abuse detection)

This data is stored in the hub backend's database to manage the waitlist and to detect abuse. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures at your request) and Art. 6 (1) (f) GDPR (legitimate interest in an abuse-free signup process).

Waitlist entries are kept until you are invited into the closed beta or until you ask us to remove your entry, whichever comes first. You can request removal at any time by emailing hello@buddystack.io.

6. Email delivery via Resend

To send waitlist confirmation and invitation emails, we use the service Resend (Resend, Inc., USA). For this purpose your email address is transmitted to Resend, acting as a processor under Art. 28 GDPR. Transfers to the United States are based on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses. The legal basis for the email delivery itself is Art. 6 (1) (b) GDPR.

7. Email contact

If you contact us by email, the data you provide (email address, name, content of the message) is processed solely to handle your inquiry. The legal basis is Art. 6 (1) (b) GDPR (initiation/performance of a contract) and/or Art. 6 (1) (f) GDPR (legitimate interest in responding to your inquiry). The data is deleted once it is no longer needed, unless statutory retention periods apply.

8. Local storage of preferences

This website stores only technically necessary preferences in your browser's localStorage. This data is stored locally in your browser and is not transmitted to us. It is required for the operation of the site (§ 25 (2) no. 2 TTDSG); no consent is required.

9. Linked external services

This site links to the following external services without embedding them. Data is only transmitted to the respective providers when you actively click the link:

• Simon Willison's blog — external article on the "Lethal Trifecta". Privacy: simonwillison.net/about.

10. Fonts

Fonts (Geist and Geist Mono) are served locally from this website. No connection to external font providers (e.g. Google Fonts) is made.

11. Your rights

You have the following rights under the GDPR:

• Access to your personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)

To exercise these rights, an informal email to hello@buddystack.io is sufficient.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, www.ldi.nrw.de.

13. Changes to this policy

We update this privacy policy when our data processing changes. The current version is always available at this URL.