Privacy Policy

Last updated: 29 April 2026 · pursuant to Art. 13 / 14 GDPR

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data-protection laws of the EU member states, as well as further data-protection-related provisions, is:

For any questions concerning data protection or the exercise of your rights, please contact us at the email address above.

2. General notes on data processing

2.1 Scope

We process personal data of our users only as necessary to provide a functioning website together with our content and services. Processing takes place regularly only with the user's consent (Art. 6 (1) lit. a GDPR) or on another legal basis.

2.2 Legal bases

• Art. 6 (1) lit. a GDPR — consent (e.g. newsletter sign-up)
• Art. 6 (1) lit. b GDPR — performance of a contract or pre-contractual measures
• Art. 6 (1) lit. f GDPR — legitimate interest (e.g. secure operation of the website)

2.3 Storage period

We store personal data only for as long as necessary to fulfil the relevant purpose, or as required by statutory retention obligations. Once the purpose ceases to apply and there is no further legal duty to retain the data, the data is deleted or blocked.

3. Hosting and server log files

When you visit our website, our hosting provider automatically collects data that your browser transmits to the server. This data is recorded in so-called server log files:

• IP address (anonymised after 7 days)
• Date and time of the request
• Page or file requested
• HTTP status code and amount of data transferred
• Referrer (previously visited page)
• Browser type and version
• Operating system

This data is processed to ensure the smooth operation of the website and to defend against attacks (legal basis: Art. 6 (1) lit. f GDPR). The data is not combined with other sources. Server log files are deleted automatically after 30 days.

4. Cookies

This website uses only strictly necessary cookies. They are required for basic website functions to work (e.g. language preferences, session handling). Processing is based on Art. 6 (1) lit. f GDPR and § 25 (2) no. 2 of the German Telecommunications-Telemedia Data Protection Act (TTDSG).

We do not use any tracking, analytics, or marketing cookies. There are no third-party cookies from Google, Meta, or comparable services on this website.

5. Newsletter / Launch List (Brevo)

5.1 Purpose and content

weblin.info offers the option of subscribing to our Launch List to receive updates on the project's progress. Sign-up is voluntary. We use the Launch List exclusively to send project updates regarding weblin — not a classic marketing newsletter.

5.2 Data collected

When you sign up for the Launch List, we collect the following personal data:

• Email address (mandatory)
• Optional: first name
• Sign-up date and IP address at the time of sign-up (to evidence your consent)
• Confirmation date (double opt-in)

5.3 Double opt-in procedure

After you enter your email address, we send you an email containing a confirmation link (double opt-in). Your sign-up only becomes effective once you click that link. This ensures that only the actual owner of an email address can subscribe.

5.4 Data processor: Brevo

For sending Launch List updates we use the email service provider Brevo (formerly Sendinblue). The provider is:

Brevo processes the data collected during your sign-up on our behalf (Art. 28 GDPR). We have entered into a Data Processing Agreement (DPA) with Brevo. The data is stored on servers within the European Union.

5.5 Tracking within emails

Brevo allows analysis of user behaviour (e.g. open and click statistics). We use this functionality solely to understand the general performance of our updates — we do not build personalised profiles. If you do not want to be tracked, you can unsubscribe at any time.

5.6 Withdrawal of consent

You may withdraw your consent to receive Launch List updates at any time. You can do so by clicking the unsubscribe link contained in every email or by sending a message to team@lupuslabs.de.

Legal basis for processing: Art. 6 (1) lit. a GDPR (consent). Storage period: until the consent is withdrawn.

6. Contact by email

If you contact us by email (e.g. at team@lupuslabs.de), the information you provide will be stored for the purpose of processing your enquiry and for any follow-up questions. The legal basis is Art. 6 (1) lit. b GDPR (initiation of a contract) or Art. 6 (1) lit. f GDPR (legitimate interest in handling your enquiry). We will not share this data without your consent and will delete it as soon as the matter is concluded and no statutory retention obligations apply.

7. The weblin browser extension (separate policy)

This privacy policy applies exclusively to the website weblin.info. The weblin browser extension is a separate product with its own privacy policy. Simply visiting weblin.info does not transmit any data from or about the extension to us.

You can find privacy information about the extension here:

• In the Chrome Web Store (extension detail page)
• At weblin.io/privacy (once published)
• In the source code repository: github.com/lupuslabs/n3qExt

8. Your rights as a data subject

You have the following rights with respect to the personal data we process about you:

• Right of access (Art. 15 GDPR) — find out what data we hold about you
• Right to rectification (Art. 16 GDPR) — correct inaccurate data
• Right to erasure (Art. 17 GDPR) — "right to be forgotten"
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR) — receive your data in a structured, commonly used format
• Right to object (Art. 21 GDPR) — to processing on grounds relating to your particular situation
• Right to withdraw consent (Art. 7 (3) GDPR) — at any time, with effect for the future

To exercise these rights, an informal email to team@lupuslabs.de is sufficient.

8.1 Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data (Art. 77 GDPR). The competent authority for us is:

9. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy if the legal framework or our processing activities change. The current version is always available at weblin.info/privacy. We will additionally notify subscribed Launch List recipients by email of any material changes.

A note on standard wording: This Privacy Policy was drafted in line with common templates and adapted to our concrete processing activities (hosting, Brevo newsletter, email contact). It does not replace individual legal advice. Should we substantively change the website's functionality or add new third-party services, this policy will be updated accordingly.