Privacy policy

Who is responsible?

Email: support@wandermind.app
Phone: +49 1567 8730899

Please use these contact details for questions about your data or to exercise your rights.

Website delivery and security

This website is hosted and delivered through Cloudflare, Inc., USA. When you open a page, Cloudflare processes technical connection data, including your IP address, request time, requested address, browser and operating-system information, and referrer information where your browser supplies it. This is needed to deliver the website, diagnose errors and protect against attacks.

The legal basis is Article 6(1)(f) GDPR: our legitimate interest in a reliable, secure website. Connection data is technically necessary; without it, the page cannot be delivered. Security and diagnostic records are retained only as needed for these purposes, including investigating a specific incident. The applicable Cloudflare services and their retention rules determine the provider’s storage periods.

We also use the country code derived by Cloudflare from the connection to select the regional price: EUR for EU countries and USD elsewhere. The website does not request your precise location, store this choice in cookies or create a location history. The code is evaluated for the current request. Our legitimate interest in displaying the applicable regional offer is the basis under Article 6(1)(f) GDPR. IP-based location can be inaccurate, for example when using a VPN.

Cloudflare privacy policy · Cloudflare data processing terms

Contact and support

If you contact us by email or phone, Moritz Schwaeble handles your request. We process your contact details, message, any attachments you send and the communication metadata to respond. Please do not send medical information, full payment-card details or unnecessary confidential work documents.

For requests about a purchase or contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, it is our legitimate interest in answering messages under Article 6(1)(f) GDPR. Providing information is voluntary, but we need enough detail and a way to reply to handle your request. We delete correspondence when the enquiry is resolved and no retention duty or need to establish, exercise or defend legal claims remains. Records subject to statutory retention are kept for the applicable statutory period with use restricted to that purpose.

Namecheap, Inc., USA, is the intended email provider. Once that mailbox is in use, Namecheap will process email content, attachments and delivery data on our behalf. The exact email service will be confirmed before it goes live.

Namecheap privacy policy · Namecheap data processing terms

Cookies and browser storage

The website application currently sets no analytics or advertising cookies and does not store a language preference in your browser: the language is part of the page address. Fonts and images are served with the website rather than loaded from a third-party font service.

Cloudflare security features can use technically necessary cookies, for example when checking suspicious requests. Their use depends on the security check involved; they are not used by us for advertising. Storage or access that is strictly necessary for a service you expressly request falls under Section 25(2) TDDDG. Non-essential analytics storage or access requires prior consent under Section 25(1) TDDDG.

Cloudflare security cookies and their lifetimes

Planned: visitor statistics

Google Analytics is not currently integrated into this website.

We plan to use Google Analytics 4 for visitor statistics only, not advertising or remarketing. Depending on the final configuration, it will process page views, interactions, approximate location, device/browser information and pseudonymous identifiers. The intended provider is Google Ireland Limited, Ireland, with possible processing by Google LLC in the USA.

Before activation, we will add a consent choice and update this notice with the actual settings, cookies and retention periods. Analytics will load only after opt-in, based on Article 6(1)(a) GDPR and Section 25(1) TDDDG. Declining must leave the website usable. Consent will be withdrawable at any time for the future through the consent settings. No analytics consent is currently requested because the integration is not active.

Google privacy policy

Purchases through Dodo Payments

The purchase button opens the checkout hosted by Dodo Payments. The customer portal opens on Dodo’s website too.

We link to a checkout hosted by Dodo Payments, Inc., USA. As Merchant of Record, Dodo acts as an independent controller for payment processing, tax, fraud prevention and disputes. Dodo’s own privacy notice applies to that processing. Dodo is not simply our processor for these activities.

Purchases will involve contact, billing, order and payment information, plus technical connection data. We expect to receive the order, customer contact details, payment status and licence information needed to provide the product and support. Our contractual processing will rely on Article 6(1)(b) GDPR; statutory recordkeeping on Article 6(1)(c). Required checkout fields will be marked; a purchase cannot be completed without the necessary details. Our order records will be retained as needed for fulfilment, support and applicable statutory retention duties. Dodo sets its own retention periods for processing as an independent controller.

Dodo Payments privacy policy · Dodo data processing terms

Planned: online licence checks in the app

The macOS and Windows apps are intended to use Dodo for licence activation and validation. This is separate from browsing this website. The planned data includes the licence key, activation/instance identifier and validation result; a connection also exposes technical network data such as the IP address. The purpose is to provide and verify the purchased licence, with Article 6(1)(b) GDPR as the intended legal basis for necessary contractual processing.

Before the app launches, its privacy notice will specify the actual fields, recipients, check frequency, retention, and how offline use or a failed check affects access. Online checks mean that local-first does not mean entirely offline. This website does not perform app licence checks.

Recipients and international processing

The providers named above receive data only in connection with the relevant service. Cloudflare operates an international network, so processing outside the EU/EEA, including in the USA, is possible. Its data processing terms provide for EU Standard Contractual Clauses for relevant transfers. Those terms, linked above, describe the safeguards. You may also contact us to obtain information about applicable safeguards or a copy.

The planned Namecheap, Google and Dodo services may also involve processing outside the EU/EEA; Dodo’s infrastructure includes processing in India. Before each integration starts, we will confirm the applicable contractual safeguards and update this notice. An analytics opt-in does not replace the need for an appropriate international-transfer mechanism.

Your rights

Subject to the conditions of the GDPR, you have the right to access your personal data, have inaccurate data corrected, request erasure or restriction of processing, and receive portable data where processing is automated and based on consent or a contract (Articles 15–20 GDPR).

Right to object: Where we rely on legitimate interests, you may object for reasons relating to your particular situation (Article 21 GDPR). We then stop the processing unless compelling legitimate grounds override your interests and rights, or processing is needed for legal claims. You can always object to processing for direct marketing.

You may withdraw any consent at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal. Contact us using the details above; exercising your rights is generally free of charge.

You may complain to a supervisory authority, particularly where you live or work or where an alleged infringement occurred. The authority responsible for us is the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information (LDI NRW). Contact LDI NRW.

Newsletter and future changes

There is currently no newsletter subscription on this website. We do not use support enquiries as newsletter sign-ups. If a newsletter is introduced, we will provide its own opt-in and information about the provider, data and retention before collecting subscriptions.

For the current informational website, we do not make solely automated decisions that produce legal or similarly significant effects on you. We will update this notice when the actual services or processing change. The planned-service descriptions above do not mean those integrations are already active.