Privacy Policy
Last updated: July 2026
1. Controller
Steffen Giebler — 52N34S Group
Schwedter Str. 25, 10119 Berlin, Germany
Email: privacy@52n34s.com
2. Data We Collect
Waitlist signup
When you join the waitlist, we store your email address, your selected language preference, and (if provided) your reason for learning Spanish, via Supabase. This is used solely to notify you when Carpincho launches and to send you early word-list previews.
Admin authentication
Carpincho's internal admin dashboard uses Supabase Auth for login by the site operator. This does not involve visitor or waitlist data beyond what's described above.
Analytics and error tracking
We use PostHog for website analytics (page views, general usage patterns) and Sentry for error tracking, both hosted on EU servers. Neither service receives your email address or waitlist entry content beyond standard technical data (browser type, device type, IP-derived region).
Transactional email
When you join the waitlist, we send a confirmation email via Resend to verify your email address (double opt-in).
Website hosting
This website is hosted on Vercel, which may process standard server logs (IP address, browser type, timestamp) as part of hosting operations.
3. Legal Basis for Processing (GDPR Art. 6)
- Waitlist signup and confirmation email: Consent (Art. 6(1)(a)) / performance of pre-contractual measures (Art. 6(1)(b))
- Website analytics (PostHog): Legitimate interest — understanding site usage (Art. 6(1)(f))
- Error tracking (Sentry): Legitimate interest — maintaining site stability (Art. 6(1)(f))
- Website server logs (Vercel): Legitimate interest — security and operations (Art. 6(1)(f))
4. Third-Party Services
- Supabase (Supabase Inc., US) — Database and authentication. Data stored in the EU region. Data Processing Agreement in place.
- Resend (Resend, US) — Transactional email (waitlist confirmation). Data transfer to the US covered by Standard Contractual Clauses (SCCs).
- PostHog (PostHog Inc., US) — Website analytics, processed on EU servers (eu.posthog.com).
- Sentry (Functional Software Inc., US) — Error tracking, processed on EU servers.
- Vercel (Vercel Inc., US) — Website hosting.
5. International Data Transfers
Some service providers are located outside the EEA. Where applicable, we rely on Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms. We apply GDPR principles to all users globally.
6. Data Retention
- Waitlist email and preferences: Until app launch communication is complete, or until you unsubscribe
- Analytics data (PostHog): Per PostHog's retention policy
- Error tracking data (Sentry): Per Sentry's retention policy
- Website server logs (Vercel): Approximately 30 days
7. Your Rights (GDPR)
You have the right to access, correct, erase, restrict processing of, and port your data, and to object to processing based on legitimate interest, and to lodge a complaint with a supervisory authority. To exercise these rights or unsubscribe from the waitlist, contact privacy@52n34s.com.
Competent supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI), Friedrichstr. 219, 10969 Berlin.
8. Children
Carpincho is not directed at children under 13. If you believe a child has provided us with data, contact privacy@52n34s.com and we will delete it promptly.
9. Changes to This Policy
The current version is always available at carpincho.app/privacy.