Privacy policy
1. Controller
Maik Schuheida, The Maker Academy, Heidenburgstraße 6D, 70378 Stuttgart, Germany. Email: hello@fingerchord.com.
2. In short
- This website sets no cookies and uses no tracking, analytics or advertising.
- It stores nothing in your browser and loads nothing from third party servers. The fonts are served from our own server.
- We only process data when you visit the site (server logs at our host) and when you join the waitlist.
- The Fingerchord app processes camera, hands, face and voice on your device only.
3. Hosting and server logs
The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit, your browser sends technically necessary data that Vercel logs: IP address, time, requested address, amount of data transferred, referrer, browser and operating system.
The purpose is delivering the site, keeping it stable and defending against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). Logs are not combined with other data. Retention: at most one day.
Vercel delivers the site through a global network, so data may be processed in the USA. We have a data processing agreement with Vercel under Art. 28 GDPR. Provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Transfers to the USA are based on the EU Standard Contractual Clauses.
4. Waitlist and newsletter
When you join the waitlist, we process your email address, the language of the page, the source ("website"), the version of the consent text (currently consent-2026-10), the status of your sign up, a confirmation token and the times of sign up, confirmation and, if applicable, unsubscribing.
We email you when Fingerchord launches and occasionally with news about Fingerchord. You must be 16 or older to sign up.
Double opt-in
After you submit the form, you receive an email with a confirmation link. Only after you click it are you on the list. This makes sure nobody signs up with someone else's address. We delete unconfirmed sign ups 30 days after the last confirmation email.
Legal basis
The basis is your consent under Art. 6(1)(a) GDPR and § 7(2) no. 2 UWG. We keep proof of consent (time and text version) under Art. 6(1)(c) in conjunction with Art. 7(1) GDPR.
Withdrawing consent
You can withdraw your consent at any time with effect for the future: via the unsubscribe link in every email or by writing to hello@fingerchord.com. This does not affect the lawfulness of processing up to that point. After you withdraw, we delete your data. We only keep a block entry so you get no further emails, and proof of your earlier consent for up to three years. The block entry only contains a cryptographic hash of your address, not the address itself. If you sign up again and confirm, the block entry is lifted.
Service providers
- Supabase (database and server function for sign ups). Servers in the EU, Frankfurt region (eu-central-1). Contracting party: Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513. Your data is stored in the EU; where Supabase accesses it from outside the EU, the EU Standard Contractual Clauses apply. When you submit, the function processes your IP address for technical reasons. It is used only briefly to block abuse and is not stored.
- Resend (sending confirmation and newsletter emails from @fingerchord.com). Resend processes your email address, the content of the email and technical delivery data. Contracting party: Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA. Processing takes place mainly in the USA, based on Resend's certification under the EU-US Data Privacy Framework and on the EU Standard Contractual Clauses. We do not track opens or clicks in our emails.
We have data processing agreements with both providers under Art. 28 GDPR; they are part of the providers' terms of service.
5. Contact by email
When you write to us, we process your address and message in order to reply. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR for questions about a contract. We delete the message once it is handled and no retention obligation applies. Email provider for hello@fingerchord.com: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.
6. No cookies, no tracking, own fonts
This website sets no cookies and does not use local storage in your browser. There are no analytics, tracking or advertising services, no embedded videos, maps or social media buttons. We serve the fonts Archivo and Bodoni Moda ourselves, no connection to Google or other font providers is made.
7. The Fingerchord app
The app detects hands and, if you choose a mask, face points directly on your device. Camera images, hand and face points and your voice are not sent to us or third parties. Recordings stay on your device until you share them yourself, for example to TikTok or Instagram. The app contains no tracking or advertising SDKs. We will publish separate privacy information for accounts, purchases and song requests in the app at launch.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent (Art. 7(3)). Under Art. 21 GDPR you may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f). Write to hello@fingerchord.com.
You may also lodge a complaint with a data protection supervisory authority. Our authority is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.
9. Security
Transfers are encrypted (TLS). The database behind the waitlist is not publicly accessible, and the website itself has no direct access to it.
10. Voluntary data, automated decisions
Joining the waitlist is voluntary. Without an email address we cannot notify you. There is no automated decision making, including profiling, under Art. 22 GDPR.