Privacy policy / Datenschutzerklärung

Last updated: 2 November 2026

1. Privacy at a glance

This policy explains which personal data is processed when you visit squeezefactor.space, sign up for our newsletter or contact us, why, on what legal basis, and what rights you have under the EU General Data Protection Regulation (GDPR). Personal data is any information that relates to an identified or identifiable person, for example your IP address or email address.

In short: SqueezeFactor sets no cookies, uses no analytics or tracking tools, loads no third-party fonts, scripts or embedded media, and shows no ads. Data is processed only by our hosting provider (Cloudflare) when you load a page, by our newsletter provider (Kit) if you subscribe, and by retailers if you follow a link to their shop.

2. Controller (Verantwortlicher)

The controller responsible for data processing on this website (Art. 4(7) GDPR) is:

Leon Bank
Luitpoldstraße 109
76770 Hatzenbühl
Deutschland (Germany)
Email: hello@squeezefactor.space

We are not required to appoint a data protection officer (Art. 37 GDPR, § 38 BDSG).

3. General information

Legal bases

We process personal data only where a legal basis applies, in particular: your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR), a legal obligation (Art. 6(1)(c) GDPR), or our legitimate interests (Art. 6(1)(f) GDPR). Where we store or read information on your device, § 25 TDDDG (German Telecommunications Digital Services Data Protection Act) also applies; we currently do not do so (see section 5).

Recipients and processors

We use external service providers that process data on our behalf (processors, Art. 28 GDPR). We have concluded data processing agreements with them. They are named in the sections below.

Transfers to third countries

Some providers are based in the USA. The European Commission adopted an adequacy decision for the USA on 10 July 2023 for companies certified under the EU-U.S. Data Privacy Framework (DPF) (Art. 45 GDPR). Where a provider is not certified, transfers are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Which mechanism applies is stated for each provider below.

Storage period

Unless a more specific period is stated below, we keep personal data only for as long as needed for the purpose it was collected for. We delete it when you withdraw consent or object, unless statutory retention periods (for example under tax or commercial law) or another legal basis require us to keep it; in that case it is deleted once that reason no longer applies.

Encryption

This site is served only over HTTPS (TLS encryption). You can recognise an encrypted connection by "https://" and the lock icon in your browser's address bar.

4. Hosting and content delivery (Cloudflare)

This website is hosted and delivered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA ("Cloudflare"), using Cloudflare Workers and Cloudflare's content delivery network (CDN). Every page request passes through Cloudflare's servers worldwide, usually one close to you.

Data processed: when you open a page, your browser automatically transmits data that Cloudflare processes and may record in server log files: your IP address, date and time of the request, the requested URL, the HTTP status and amount of data transferred, the referring URL, browser type and version, operating system, and approximate location derived from the IP address. Cloudflare also uses this data to detect and block attacks and abusive traffic. Cloudflare may additionally ask your browser to send network error reports (Network Error Logging) so that delivery problems can be detected.

Purpose and legal basis: delivering the website securely, reliably and quickly, and defending against attacks such as DDoS. This is our legitimate interest under Art. 6(1)(f) GDPR. The website cannot be delivered without this processing.

Storage period: we do not store request logs ourselves and have not enabled additional Worker logging or log export. Cloudflare keeps log and security data only as long as needed for these purposes, as described in its policies; we see only aggregated, non-personal traffic statistics in the Cloudflare dashboard.

Processor agreement and transfer: we have concluded a data processing agreement with Cloudflare (the Cloudflare Data Processing Addendum). Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF listing, status active as of 2 November 2026); data transfers to the USA are based on this certification (Art. 45 GDPR) and, should it lapse, on the Standard Contractual Clauses included in the DPA. More information: cloudflare.com/privacypolicy.

5. Cookies and local storage

This website does not set cookies and does not store or read any information on your device (no local storage, no fingerprinting). We therefore do not need a cookie banner. Retailers and Kit may set their own cookies once you leave this site by following a link or submitting the newsletter form (see sections 9 and 10).

6. Analytics and tracking

We currently use no web analytics, tracking pixels, advertising networks or social media plugins. Cloudflare Web Analytics is not enabled. If we introduce an analytics tool in the future, we will update this policy beforehand and, where required, ask for your consent.

7. Fonts

The fonts used on this site (Inter and Fraunces) are hosted on our own server and delivered together with the website. No connection to Google Fonts or other external font services is made.

8. Contact by email

If you email us, we process your email address, your name if you provide it, and the content of your message to answer your request.

How emails reach us: emails to addresses at squeezefactor.space are received by Cloudflare Email Routing (Cloudflare, see section 4) and forwarded to our mailbox, which is hosted with Google Workspace (Gmail). For customers in the EU, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google stores and processes the emails on our behalf under Google's Cloud Data Processing Addendum (Art. 28 GDPR).

Transfer to third countries: Google may also process data on servers of Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF listing, status active as of 2 November 2026); transfers are based on this certification (Art. 45 GDPR) and, where required, on the Standard Contractual Clauses included in Google's data processing terms (Art. 46(2)(c) GDPR). Google's privacy policy: policies.google.com/privacy.

Legal basis: Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual steps, otherwise our legitimate interest in answering enquiries addressed to us and in using a reliable, secure email service for this (Art. 6(1)(f) GDPR).

Storage period: we delete your messages once your request has been dealt with, unless statutory retention periods apply (for example six or ten years for business correspondence under § 257 HGB and § 147 AO).

9. Newsletter (SqueezeFactor Weekly) via Kit

Provider: we send our newsletter with Kit, a service of Kit, Inc. (formerly ConvertKit), P.O. Box 761, Boise, ID 83701, USA ("Kit"). Kit stores subscriber data on our behalf and sends the emails.

Data processed: if you enter your email address in one of our newsletter forms, your browser sends it directly to Kit, together with a tag identifying the form's location on our site (for example "deal-alerts" or "black-friday"). After you submit the form, you are taken to a Kit page, where Kit can process technical data such as your IP address and may set its own cookies. Kit also records the date and time of your sign-up and of your confirmation.

Double opt-in: after signing up, you receive an email asking you to confirm your subscription. You are added to the list only after you click the confirmation link. This ensures nobody can sign up with someone else's email address. We log sign-up and confirmation to be able to prove your consent.

Open and click tracking: our newsletter emails may contain a small tracking pixel and tracked links. If enabled, Kit records whether and when an email was opened and which links were clicked, together with technical data (such as IP address and email client). We use this only in order to see which topics interest readers and to improve the newsletter. This analysis is part of the consent you give when subscribing; you can withdraw it only by unsubscribing, since it cannot be switched off for individual subscribers.

Legal basis: your consent, Art. 6(1)(a) GDPR (and § 7(2) UWG). You can withdraw your consent at any time with effect for the future, using the unsubscribe link in every newsletter or by emailing hello@squeezefactor.space. The lawfulness of processing carried out before withdrawal is not affected. Newsletter emails may contain affiliate links (see section 10).

Storage period: we keep your data at Kit until you unsubscribe or ask us to delete it. After unsubscribing, your email address may be kept on a blocklist so that you are not emailed again; this is in our and your legitimate interest (Art. 6(1)(f) GDPR) and the address is used for no other purpose. Records proving consent are kept as long as needed to demonstrate it (Art. 7(1) GDPR, Art. 6(1)(c) and (f) GDPR).

Processor agreement and transfer: we use Kit on the basis of Kit's Data Processing Addendum. Kit processes data in the USA. Data transfers to Kit are based on the EU Standard Contractual Clauses (Module 2, controller to processor) included in that DPA (Art. 46(2)(c) GDPR). Kit, Inc. was certified under the EU-U.S. Data Privacy Framework, but the official DPF listing shows that certification as lapsed since 31 July 2026, so we do not rely on it. Kit's privacy policy: kit.com/privacy.

10. Affiliate links

Some links to shops on this website are, or will become, affiliate links. If you click one and then buy something, the retailer may pay us a commission; the price for you stays the same. Programmes we use or plan to use: Sirui (via the affiliate network Awin, operated by Awin AG, Berlin), B&H Photo, Adorama, the eBay Partner Network, and MPB. See also our affiliate disclosure.

How it works: clicking an affiliate link takes you to the retailer's site or to the affiliate network's redirect server. The link contains an identifier for our site. After the click, the retailer or network may set cookies or use similar technologies in your browser to recognise that you came from SqueezeFactor and to attribute a purchase to us. No cookies are set on SqueezeFactor itself, and we do not receive any personal data about you from the retailers, only aggregated reports on clicks, sales and commissions.

Legal basis: placing affiliate links is based on our legitimate interest in financing this website (Art. 6(1)(f) GDPR). The retailers and networks are responsible for the processing on their own sites, including any consent they need for cookies under § 25 TDDDG; please see their privacy policies (for Awin: awin.com/gb/privacy). You can prevent tracking cookies with your browser settings.

Status on 2 November 2026: no affiliate programme is active yet; buy buttons link straight to the store without tracking parameters.

11. Your rights

Under the GDPR you have the following rights regarding your personal data. To exercise them, simply email hello@squeezefactor.space.

Right to object (Art. 21 GDPR): where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. We will then stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. Where data is processed for direct marketing, you may object at any time without giving reasons.

Right to lodge a complaint (Art. 77 GDPR): you have the right to complain to a data protection supervisory authority, in particular in the EU member state of your residence, place of work or the place of the alleged infringement. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (LfDI RLP)
Hintere Bleiche 34
55116 Mainz
Germany
Phone: +49 6131 8920-0
Email: poststelle@datenschutz.rlp.de
Website: www.datenschutz.rlp.de

12. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

13. Are you required to provide data?

You are not legally or contractually required to provide personal data. Without the technical connection data described in section 4 we cannot show you the website; without your email address we cannot send you the newsletter or answer your email.

14. Changes to this policy

We update this policy when the website, our providers or the law change. The current version is always available on this page.

This privacy policy was written by the site operator following the structure of common German privacy policy templates. It is not legal advice.