Privacy Policy

Effective date: October 8, 2026

1. Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is:
Leon Grosser
Lange Enden 29, 13437 Berlin, Germany
Email: hello@psalmside.com

2. Hosting and server logs

This website is hosted by Netlify, Inc., 101 2nd Street, Suite 575, San Francisco, CA 94105, USA (“Netlify”). When you open a page, the provider automatically processes technical data: your IP address, date and time, the page requested, the referring page and your browser type. This is needed to deliver the website securely.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, working website). Netlify acts as our processor under its data processing agreement, which is part of Netlify’s terms (Art. 28 GDPR). Netlify keeps these logs only as long as needed for security and operation; we do not use them to identify you. Transfer to the USA: Netlify is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR).

3. Waitlist

If you join the waitlist we process: your email address, the plan you said you would choose (yearly, monthly or undecided), which version of this page you saw (a, b or c), whether you visited on an iPhone or another device (“ios” or “other”, read from your browser; the app is planned for iPhone only), the time of your signup and confirmation, which version of the consent text you agreed to, the proof of consent our email provider records (such as your IP address and timestamps), and whether you open our emails and click links in them (see “Email statistics” below).

Purpose: to email you about Psalmside’s launch and development, and to measure interest before we build the app.

Legal basis: your consent, Art. 6(1)(a) GDPR. Because signing up for a Christian app may reveal religious beliefs, we also ask for your explicit consent under Art. 9(2)(a) GDPR. You must be 16 or older to join. We use double opt-in: you receive an email and only join the list after clicking the confirmation link.

Email provider (processor): Kit, Inc. (formerly ConvertKit), 750 West Bannock Street #761, Boise, Idaho 83701-0761, USA (“Kit”). Kit processes this data on our behalf under its data processing agreement (Art. 28 GDPR). According to its terms, Kit processes data in the USA and other countries. Transfer to the USA: EU Standard Contractual Clauses (Art. 46(2)(c) GDPR), which are part of Kit’s data processing agreement. According to its privacy policy, Kit also participates in the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR). You can request a copy of the clauses from hello@psalmside.com.

Email statistics: our emails contain a small tracking pixel and tracked links, so Kit records whether and when an email was opened and which links were clicked. We use this only to see whether our updates reach you and interest you. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw by unsubscribing. You can also block images in your email app.

Retention: until you unsubscribe or withdraw your consent. If you don’t click the confirmation link, we delete your signup after 30 days. If you unsubscribe, we delete your data, except a record that you consented and when you withdrew (email address, consent version, timestamps), which we keep for up to 3 years to be able to prove that we had your consent (Art. 6(1)(f), Art. 9(2)(f), Art. 17(3)(e) GDPR). If Psalmside has not launched within 12 months of your signup, we delete the waitlist. If we decide not to build Psalmside, we tell you and delete it.

Withdrawal: every email contains an unsubscribe link, or write to hello@psalmside.com. Withdrawal does not affect processing before it.

4. Meta Pixel (only with your consent)

If, and only if, you click “Accept” in the tracking banner, we load the Meta Pixel from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). It sets cookies and sends Meta information about your visit: that you viewed the page, viewed the prices, clicked a plan (and that plan’s price), joined the waitlist or confirmed your email address, plus technical data such as your IP address and browser information. Meta can link this to your Facebook or Instagram account. We use it to measure and improve our ads. We do not send your email address to Meta, and Meta’s automatic advanced matching is turned off. The only details we add to these events are the currency and price of a plan.

Legal basis: your consent, § 25(1) TDDDG and Art. 6(1)(a) GDPR. Because Psalmside is a Christian prayer app, your visit can reveal your religious beliefs to Meta. The banner therefore asks for your express consent to this as well, including the processing of data that may reveal your religious beliefs (Art. 9(2)(a) GDPR). It is optional; if you click “Reject” or ignore the banner, the pixel does not load.

Joint controllership: for the collection and transmission of this data we are jointly responsible with Meta (Art. 26 GDPR) under Meta’s Controller Addendum: facebook.com/legal/controller_addendum. You can exercise your rights against us or Meta (Art. 26(3) GDPR). After transmission, Meta processes the data as an independent controller, including for its own purposes. Meta’s own processing is described at facebook.com/privacy/policy. Data may be transferred to Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA, which is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR).

Your choice: your choice (accept or reject) and the date are saved in your browser’s local storage under “psalmside-pixel-v2” so we don’t ask again; this is necessary to respect your choice (§ 25(2) no. 2 TDDDG). We ask again after 12 months. You can change it anytime with “Tracking settings” at the bottom of the page; if you withdraw, we delete the Meta cookies (_fbp, _fbc) from your browser and reload the page without the pixel. If your browser sends a Global Privacy Control or Do Not Track signal, we do not load the pixel and do not ask.

5. Fonts

Fonts are served from this website itself (see section 2). Your browser does not connect to Google or other font services.

6. Contacting us by email

If you email us, we process your message and address to answer you. Legal basis: Art. 6(1)(f) GDPR (and Art. 6(1)(b) GDPR if it concerns a contract). We delete it when it is no longer needed.

7. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Write to hello@psalmside.com.

Right to object (Art. 21 GDPR): Where we process data based on legitimate interests (sections 2 and 6), you can object at any time for reasons arising from your particular situation.

You also have the right to complain to a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for us: Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information), Alt-Moabit 59-61, 10555 Berlin, Germany, mailbox@datenschutz-berlin.de, datenschutz-berlin.de.

Providing your data is voluntary. If you don’t, you simply can’t join the waitlist. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

8. For California residents (CalOPPA)

What we collect

If you join the waitlist: your email address, the plan you picked, which page version you saw, whether you used an iPhone, whether you open our emails and click links in them, and signup/confirmation records kept by our email provider (including your IP address and timestamps). When you visit: technical server log data (section 2). If you accept the Meta Pixel: online identifiers and information about your visit, as described in section 4.

Who we share it with

Our hosting provider and our email provider as processors, and Meta only if you accept the pixel. We do not sell your email address. Data sent to Meta through the pixel (only with your consent) may count as “sharing” for cross-context behavioral advertising under California law; you can turn it off anytime with “Tracking settings”.

Reviewing or changing your information

Use the unsubscribe link in any email, or write to hello@psalmside.com to see, correct or delete what we hold.

Do Not Track

If your browser sends a Do Not Track or Global Privacy Control signal, we do not load the Meta Pixel.

Third-party tracking

Only Meta, and only if you click “Accept”. No other third party tracks you across websites through this page.

Changes

If we change this policy we update it here and change the effective date at the top.

9. Children

This page is not directed at children under 16. Please don’t join the waitlist if you are under 16.

Psalmside · Privacy · Imprint