Privacy Policy

How this site handles your data. Last updated 3 October 2026.

1. Controller

The controller responsible for data processing on this website is:

2. Data protection officer

A Data Protection Officer is not required and has not been appointed.

3. Your rights as a data subject

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): to obtain confirmation of whether we process your data and to receive a copy.
• Right to rectification (Art. 16 GDPR): to have inaccurate data corrected.
• Right to erasure (Art. 17 GDPR): to have your data deleted, provided no retention obligations apply.
• Right to restriction of processing (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR): to receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21 GDPR) to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3) GDPR) at any time with effect for the future.
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR). In our case this is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit.

To exercise any of these, email michael@zoomaa.ai. Removing yourself from the waitlist requires nothing more than asking.

4. Hosting and server log files

This website is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you visit this site, the provider's servers automatically collect and store information in server log files that your browser transmits, namely:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing device
• Date and time of the server request
• IP address (as a rule shortened / anonymised)

This data is not merged with other data sources. It is processed on the basis of Art. 6(1)(f) GDPR, our legitimate interest in the technically error-free presentation and security of this site. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare.

5. Cookies and local storage

This site sets no cookies. There is no advertising, no tracking and no analytics, which is why you are not asked for cookie consent.

The site does use your browser's sessionStorage to remember the email address you entered and whether you completed the confirmation step, so that reloading the page does not send you back to the beginning. This is strictly necessary for the function you requested, falls under Section 25(2) TDDDG and therefore does not require consent. It is stored only in your own browser, is never transmitted to us, and is erased when you close the tab.

6. Joining the waitlist

When you request access we process the email address you enter, together with the technical data in section 4. The address is used to send you a confirmation code, to confirm that the address is yours, and to contact you once when a place in the private beta becomes available.

The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and, for the confirmation step, our legitimate interest under Art. 6(1)(f) GDPR in preventing other people's addresses being entered without their knowledge.

Providing your address is voluntary. Without it we cannot place you on the waitlist.

7. Spam protection

The form contains a hidden field that is invisible to people and is normally only filled in by automated scripts. If it is filled in, the submission is discarded and no data is stored. No personal data is processed for this check beyond the submission itself. The basis is Art. 6(1)(f) GDPR, our legitimate interest in keeping the waitlist free of automated entries.

8. What this site does not do

• No analytics, no pixels, no heatmaps and no session recording.
• No advertising and no profiling.
• No payment processing. Nothing is sold here.
• No embedded fonts, maps or videos loaded from third-party servers. The typeface is embedded in the page itself, so no request is made to any font provider.
• No automated decision-making within the meaning of Art. 22 GDPR.

9. Retention periods

We keep your email address until the private beta ends or until you ask us to remove it, whichever comes first. Confirmation codes are short-lived and are discarded once used or expired. Server log files are retained by the hosting provider for a short period for security purposes and are then deleted or anonymised.

Where statutory retention obligations apply, in particular under Section 257 HGB and Section 147 AO, those periods take precedence. They do not apply to a waitlist entry.

10. Recipients and transfers to third countries

We only pass on personal data where this is necessary, to IT service providers bound by data processing agreements pursuant to Art. 28 GDPR. Where data is transferred to a country outside the EU/EEA, we ensure an adequate level of protection, in particular through an adequacy decision of the European Commission (Art. 45 GDPR) or through the EU Standard Contractual Clauses (Art. 46 GDPR) together with any additional measures required.

Current recipients:

• Cloudflare, Inc. (USA) — website hosting and delivery.
• Sniperly's own authentication service (reachable at app.sniperly.ai) — generates and sends the confirmation code and stores confirmed waitlist entries.

11. Data security

This site is served exclusively over TLS (https). Confirmation codes are single-use and expire shortly after being issued.

12. Changes to this policy

We may amend this policy to reflect changes to the service or to legal requirements. The version published here is the one that applies.