Privacy Policy

1. General Information

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the legal provisions (GDPR, TMG). In this privacy policy, we inform you about the most important aspects of data processing within our website.

2. Data Controller

Malte Helmhold
Bautzner Str. 8
01099 Dresden
E-Mail: dropin@warmup.today
Phone: +49 351 874 462 64

3. Hosting

Our website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Vercel processes personal data on our behalf that is automatically collected when you visit our website (e.g., IP address, browser type, operating system, referrer URL, time of access). This is necessary for providing the website and is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR). Vercel uses servers worldwide (Edge Network). For more information, see Vercel's privacy policy at: https://vercel.com/legal/privacy-policy

4. Cookies

Our website uses technically necessary cookies that are required for the operation of the site (e.g., session cookies for login). These cookies are set on the basis of Art. 6 para. 1 lit. f GDPR. You can configure your browser to inform you about the setting of cookies and to allow cookies only in individual cases.

5. User Account & Registration

When registering on our website, the following data is collected: email address and an encrypted password. Processing is based on your consent (Art. 6 para. 1 lit. a GDPR) and is necessary for the performance of a contract (Art. 6 para. 1 lit. b GDPR). Your data is stored as long as your account is active. You can request the deletion of your account at any time.

6. Payment Processing — Lemon Squeezy

We use Lemon Squeezy (Lemon Squeezy LLC, 2093 Philadelphia Pike #9081, Claymont, Delaware 19703, USA) for payment processing. Lemon Squeezy acts as the Merchant of Record (MoR) and is therefore the direct contractual partner for your payment transaction. Lemon Squeezy collects and processes the data necessary for payment processing, including:

• Name and email address
• Payment information (e.g., credit card data)
• Billing address
• IP address and device information

The processing of this data by Lemon Squeezy is based on Art. 6 para. 1 lit. b GDPR (performance of a contract). We do not store any payment data ourselves. Lemon Squeezy may transfer data to countries outside the EU, with appropriate safeguards (e.g., standard contractual clauses) in place. For more information, see Lemon Squeezy's privacy policy at: https://www.lemonsqueezy.com/privacy

7. Web Analytics — Plausible Analytics

This website uses Plausible Analytics (Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia) to analyze page views and usage behavior. Plausible operates entirely without cookies and without collecting personal data. No IP addresses are stored, no fingerprinting is performed, and no cross-device tracking takes place. Since no personal data is processed, neither consent under Art. 6 GDPR nor consent under § 25 TTDSG is required. The collected statistics (e.g., page views, device category, country of origin) are fully aggregated and anonymous.

For more information, see Plausible's privacy policy at: https://plausible.io/privacy

8. Your Rights

You generally have the right to access, rectification, deletion, restriction of processing, data portability, and objection. If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can file a complaint with the competent supervisory authority.

Competent supervisory authority: Saxon Data Protection Commissioner, Devrientstraße 5, 01067 Dresden, Germany

9. SSL Encryption

This site uses SSL encryption for security reasons. You can recognize an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.

10. iOS App

In addition to the website, we offer the warmup.today app for iOS. The following additional information applies to the app:

Sign in with Apple

The app allows sign-in via "Sign in with Apple". Apple transmits an anonymised email address and optionally your name to us. We store this data solely to provide your user account. Apple processes the authentication independently in accordance with Apple's privacy policy (https://www.apple.com/legal/privacy/).

In-App Purchases (StoreKit)

Premium subscriptions are processed through Apple's In-App Purchase system. Apple acts as the payment processor and is subject to its own privacy rules. We only receive a purchase confirmation from Apple, not complete payment data. Subscription management (cancellation, renewal) is handled exclusively through your device's Apple ID settings.

Background Audio

The app plays audio content in the background (e.g. while the phone is locked). No additional personal data is collected in this process. Background playback requires the corresponding iOS permission (UIBackgroundModes: audio), which is used exclusively for audio playback.

No Cross-App Tracking

The app does not use advertising IDs (IDFA) and does not engage in cross-device tracking. No data is shared with advertising networks. This is documented in the App Privacy Manifest (PrivacyInfo.xcprivacy).

Apple's own data collection

Apple independently collects app usage data, crash reports and performance metrics through the App Store and Xcode Organizer. This occurs based on your Apple ID settings. For more information, see Apple's privacy policy at https://www.apple.com/legal/privacy/.