What we collect, why, and how to stop us.
Effective 15 May 2026
We're an EU company. We run this site on Vercel (EU region, Frankfurt). We use Vercel Analytics — cookie-free, no personal data, just aggregate page views. There's no contact form, no newsletter, no third-party advertising trackers.
If you email us, we keep the conversation. If you want it deleted, write to hello@confr.chat and we'll delete it.
1. Who is the data controller?
Future SR UG (haftungsbeschränkt)
Strelitzer Strasse, 10115 Berlin, Germany
2. What this site collects
Server logs
When you visit any page, our hosting provider (Vercel) records technical request data: your IP address, user-agent, the path you requested, and a timestamp. This is used to deliver the page and to defend against abuse. Logs are retained for a short rolling window by Vercel as the processor.
Legal basis: GDPR Art. 6(1)(f) — legitimate interest in serving the site and protecting it from attack.
Vercel Analytics
We use Vercel's first-party analytics. It counts page views and routes — no cookies, no cross-site tracking, no fingerprinting. The data is aggregated and stored in the EU. We can see how many people visited a page; we can't see who you are.
Legal basis: GDPR Art. 6(1)(f) — legitimate interest in understanding which pages are useful, with minimum intrusion.
Email you send us
If you write to us at hello@confr.chat, we keep the email and our reply. We use it to respond to you and to remember the conversation if you write again. Kept until you ask us to delete it.
Legal basis: GDPR Art. 6(1)(b) — performance of a contract or pre-contract communication.
3. What we do NOT do
- No advertising trackers, no Facebook Pixel, no Google Analytics.
- No cookies for analytics. (Vercel Analytics is cookie-free.)
- No selling or sharing data with third parties for marketing.
- No newsletter without explicit opt-in (we don't have a newsletter yet).
- No contact form — only the
mailto:link above, which uses your own mail client.
4. Where the data lives
Site hosting and analytics run on Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA), which serves this site from its EU region (Frankfurt). Where US transfer occurs incidentally, Vercel relies on the EU–US Data Privacy Framework and Standard Contractual Clauses.
Email is handled by our mail provider on EU infrastructure. Talk to us if you want to know the specific provider for any given inbound.
5. How long we keep things
- Server logs: short rolling window at Vercel (typically 30 days).
- Analytics: aggregate, retained per Vercel's terms; no personal data.
- Email correspondence: until you ask us to delete it.
6. Your rights under GDPR
You have the right to:
- access the personal data we hold about you (Art. 15)
- have it corrected if it's wrong (Art. 16)
- have it deleted (Art. 17)
- restrict our processing of it (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interest (Art. 21)
- complain to a supervisory authority (Art. 77) — for Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit
To exercise any of these rights, write to hello@confr.chat. We aim to respond within 30 days.
7. The product app vs this site
This page covers confr.chat — the marketing site. The product app (where you can run an actual investigation) has its own privacy notice presented at sign-up, with the specific details about how interview transcripts and findings are handled (EU storage, anonymity rules, retention windows).
8. Changes to this statement
If we change this statement we'll update the "Effective" date at the top and post the changes here. For material changes we'll notify ongoing customers by email.