Privacy Policy
Moonverette is a personal, non-commercial project. This English version is provided for convenience; the German version is the legally operative one for German visitors.
1. Data Controller
Responsible for data processing on this website:
Diana Garcia
14467 Potsdam, Germany
Email: moonverette@gmail.com
2. Hosting
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA ("Vercel"). When you visit this website, Vercel automatically collects information in server log files transmitted by your browser, including: IP address, date and time of the request, browser type, and operating system. This data is processed to ensure reliable operation of the website and IT security (Art. 6(1)(f) GDPR, legitimate interest). Because Vercel Inc. is based in the US, personal data may be transferred to a third country; Vercel provides EU Standard Contractual Clauses (SCCs) as a safeguard for this.
Fonts, scripts and images are served from our own server. No external font or script services (such as Google Fonts or public CDNs) are loaded, so no data is passed to third parties this way.
3. Local Storage
The editor stores your chosen language (English/German), and in addition to the account storage described in Section 4, also keeps a local copy of your current slides in your browser's localStorage automatically, as an extra safeguard. This information never leaves your device and is not transmitted to us or any third party; it's only available in this browser, on this device. You can clear this storage at any time via your browser settings.
4. Account & Saved Slides (Supabase & Resend)
Using the editor requires signing in with your email, so your slides can be saved automatically in the background and retrieved later. Sign-in works with a one-time code we send you by email, so no password is ever stored. Our email provider Resend (Resend, Inc., USA) sends that email from a server in the EU (Ireland) and processes your email address and the code for this. We have a data processing agreement with Resend, and EU Standard Contractual Clauses cover any transfer to the US. Your email address and saved slide content are processed by Supabase Inc., hosted in an EU data center (Frankfurt, Germany). This processing is necessary to provide the save/load feature you requested (Art. 6(1)(b) GDPR). You can delete your account and all associated data yourself at any time from the account menu ("Delete account"), or by contacting us at moonverette@gmail.com. We keep your data until you delete your account or ask us to delete it.
5. Link Previews & Embedded Videos
When you paste a link into the editor, your browser sends the address to our own server (hosted on Vercel). It fetches the linked page, reads its title and preview image, and sends them back as a link card; the preview image is also loaded through our server. The linked website sees the request from our server, not your IP address. The address itself is only stored as part of your slides (see Section 4). For embedded YouTube videos, the preview image is loaded directly from the YouTube servers (img.youtube.com) as soon as the slide with the video is shown, so YouTube (Google) receives technical data such as your IP address at that point. The video player itself only loads, via youtube-nocookie.com, after you click play; from that moment YouTube (Google) receives technical data such as your IP address. The legal basis is Art. 6(1)(b) GDPR (a feature you requested).
6. No Analytics or Tracking Tools
This website currently uses no analytics cookies, no tracking, and no third-party marketing pixels.
7. Your Rights
You have the right, at any time and free of charge, to information about the origin, recipients, and purpose of your stored personal data (Art. 15 GDPR), as well as a right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). For these or any other data protection questions, you can contact us at any time: moonverette@gmail.com.
8. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.