Privacy policy

Last updated: 8 July 2026

1. Controller

The controller for data processing on this website is:

For any privacy question or to exercise your rights, contact us at info@skippre.com.

2. Your rights

Under the GDPR you have the right to:

• access your stored data (Art. 15)
• rectification (Art. 16), erasure (Art. 17) and restriction (Art. 18)
• data portability (Art. 20)
• object to processing (Art. 21)
• withdraw consent with future effect (Art. 7(3))

You also have the right to lodge a complaint with a supervisory authority (Art. 77).

3. Server log files

When you visit this website, our hosting provider automatically collects information your browser transmits (IP address, date/time, page requested, referrer, browser and operating system). This is technically required to display the site securely and reliably. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

4. Hosting (Vercel)

This website is hosted by Vercel Inc. (USA) as a processor under a data processing agreement (Art. 28 GDPR). Transfers to the USA are safeguarded by the EU Standard Contractual Clauses (Art. 46 GDPR).

5. Database & backend (Supabase)

We use Supabase (Supabase Inc.) as a processor for database, authentication and server-side functions. Data you submit via forms or the launch notification is stored in Supabase infrastructure. Legal basis: Art. 6(1)(b) or (f) GDPR.

6. Launch notification & contact

If you sign up for launch notification or email us, we process your email address and message to handle your request or notify you once at launch. Notification and transactional emails are sent via Resend (Resend, Inc., USA) as a processor. Legal basis: your consent (Art. 6(1)(a)) or our legitimate interest in replying (Art. 6(1)(f)). You can withdraw consent at any time at info@skippre.com.

Spam and abuse protection: To prevent automated abuse of the enquiry form (spam, mass mailing), submissions are checked with Cloudflare Turnstile (Cloudflare, Inc., USA), a cookieless CAPTCHA service that processes technical data including your IP address for this purpose. In addition, when you submit the form we briefly store a cryptographically hashed(non-reversible) value of your IP address to rate-limit requests per network. Legal basis: our legitimate interest in the security and abuse-free operation of our service (Art. 6(1)(f)).

7. Fonts

This site uses self-hosted fonts (“Manrope”, “Inter” and “Oxanium”). The font files are served solely from our hosting provider’s server; no connection to third-party servers — in particular Google — is established, and no personal data is transmitted to third parties for this purpose.

8. Cookies & consent

Beyond technically necessary storage, we only set cookies after you have agreed via our consent banner. No non-essential cookies or identifiers are set before you opt in, and you can change or withdraw your choice at any time via the banner or cookie settings.

We use the following first-party cookies:

• skippre_consent — stores your cookie choice (categories) for about 6 months so the banner respects your decision.
• skippre_vid — a random, anonymous visitor id (about 12 months) and skippre_sid — a session id (30 minutes). Both are set only with your analytics consent and are deleted automatically when you withdraw it.

Consent covers the categories “analytics” (usage statistics, heatmaps, A/B testing) and “preferences” (remembered settings such as units or language). Legal basis: your consent (Art. 6(1)(a) GDPR together with § 25(1) TDDDG); storing the record of your choice rests on Art. 6(1)(c)/(f) GDPR.

9. Analytics (first-party audience measurement)

With your consent we collect anonymised usage statistics to improve our service. Measurement is entirely first-party via our own Supabase infrastructure — no third-party analytics provider (e.g. Google Analytics) is used, and there is no cross-site tracking.

We record events such as page views, clicks (including click position for heatmaps), scroll depth, search terms, enquiry-funnel steps and A/B test attribution, each with the page path, referrer, language, viewport size and the anonymous visitor/session id. Server-side we add the device type (mobile/tablet/desktop), a coarse location (country/region/city) and a cryptographically hashed, non-reversible value of your IP address. Your IP address itself is not stored.

Legal basis: your consent (Art. 6(1)(a) GDPR together with § 25(1) TDDDG). You can withdraw it at any time with future effect via the cookie banner; no further usage data is then collected and the related identifiers are deleted.

10. TLS encryption & updates

This site uses SSL/TLS encryption. We update this policy whenever changes to our processing require it; the version published here applies.

This English version is a convenience translation. The German version above is legally binding.