Privacy policy

This policy covers the website mankerl.app and the waitlist. The app gets its own privacy policy at launch.

1. Controller

KK Holdings OÜ, Narva mnt 5, 10117 Tallinn, Estonia. Email: privacy@mankerl.app. More in the legal notice.

2. In short

• This website sets no cookies and uses no tracking or analytics.
• Fonts are served from our own server, not from Google or any other third party.
• We only process data to deliver the site and, if you sign up, for the waitlist.

3. Visiting the website (hosting)

The website is served via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary data: IP address, date and time, the page requested, browser and device details. The purpose is to deliver and secure the website, for example against attacks (Art. 6(1)(f) GDPR; our legitimate interest is a secure, working service). We receive no access logs with IP addresses ourselves and use none of Cloudflare's analytics services. Cloudflare keeps the data only as long as these purposes require. A data processing agreement (Art. 28 GDPR) is in place with Cloudflare. Cloudflare may process data in the USA; it is certified under the EU-US Data Privacy Framework (EU Commission adequacy decision, Art. 45 GDPR).

4. Waitlist

If you join the waitlist, we process:

• your email address and language,
• optionally, the dialect you'd like to be a godparent for,
• the time and wording of your consent and the time you confirmed it,
• briefly, to prevent abuse, an irreversible hash of your IP address (24 hours at most).

Purpose: we email you when Mankerl launches. If you chose a dialect, we ask whether you'd like to be a dialect godparent. The legal basis is your consent (Art. 6(1)(a) GDPR).

Double opt-in: after signing up you get an email with a confirmation link. You're only on the list once you've confirmed. Unconfirmed sign-ups are deleted after 7 days.

Processors: the data is stored with Supabase (data centre in Frankfurt am Main, EU). Emails are sent via Brevo (Sendinblue SAS, Paris, France). Data processing agreements (Art. 28 GDPR) are in place with both.

Retention: until you unsubscribe, at the latest 12 months after the app launches.

Withdrawal: you can withdraw your consent at any time with effect for the future, via the unsubscribe link in every email or by writing to privacy@mankerl.app.

5. Contacting us by email

When you write to us, we process your email address and the content of your message to reply (Art. 6(1)(f) GDPR, or (b) for questions about a contract). Emails to @mankerl.app addresses are forwarded to our inbox by our domain provider Porkbun (Porkbun LLC, Portland, Oregon, USA). We delete messages once they are dealt with, unless we are required to keep them.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), and you can withdraw consent at any time (Art. 7(3)). Just write to us.

You can also complain to a data protection authority, for example the one in your country of residence or the Estonian authority responsible for us: Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate), Tatari 39, 10134 Tallinn, www.aki.ee.

7. Last updated

November 2026