Privacy policy

Last updated: 22 October 2026

This English version is provided for convenience. The German Datenschutzerklärung is legally binding.

This policy covers the website dipped-app.com and the Dipped app for iOS and Android. It explains which personal data is processed, why, on which legal basis and for how long.

1. Controller

Nils Berenbold
Heckenweg 5
26605 Aurich
Germany
Phone: +49 151 15268680
Email: hello@dipped-app.com

I have not appointed a data protection officer because there is no legal obligation to do so.

2. Principles

The website sets no cookies, uses no browser storage (such as local storage) and includes no analytics, advertising or tracking services. Fonts, images and scripts are served only from dipped-app.com. That is why there is no cookie banner. I do not sell personal data.

3. Hosting and delivery via Cloudflare

The website runs on Cloudflare Workers by Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). When you visit, Cloudflare processes your IP address, the requested address, date and time, browser and device information and the transferred content in order to deliver and cache the site and to protect it against attacks. Cloudflare processes this data on my behalf under a data processing agreement.

Cloudflare is certified under the EU-U.S. Data Privacy Framework. Transfers to the USA rely on the European Commission's adequacy decision (Art. 45 GDPR) and additionally on standard contractual clauses (Art. 46(2)(c) GDPR).

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is fast, secure and reliable delivery of the website.

4. Server logs

I do not store access logs myself. Cloudflare keeps its own technical logs of requests passing through its network and deletes them according to its retention periods.

5. Contact by email

If you write to hello@dipped-app.com, Cloudflare (Email Routing) forwards the message to my mailbox at Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). This processes your email address, your name if given, and the content of your message. Google is also certified under the EU-U.S. Data Privacy Framework.

The legal basis is Art. 6(1)(b) GDPR where a contract or pre-contractual steps are concerned, otherwise Art. 6(1)(f) GDPR (answering your enquiry). I delete the message once it has been dealt with, unless statutory retention obligations apply.

6. The app

Dipped needs no account and has no server of its own. Your designs are stored only on your device. If you share or export a design, you decide who receives it. The app contains no advertising or analytics services. Downloads and updates are subject to the privacy policies of Apple (App Store) and Google (Google Play).

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Write to hello@dipped-app.com.

You can also lodge a complaint with a data protection supervisory authority, for example the one responsible for me: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

8. Changes

If the website or the app changes so that other data is processed, I will update this policy. The version published here applies.