Privacy Policy

Last updated: 24 August 2026

This page explains which data is processed when you visit squally.dev, who receives it and how long it is kept. It currently covers the public website only. The product itself is not publicly available yet; once it is, the processing inside the service will be added here as its own section.

Squally is operated from Germany. Processing is governed by the General Data Protection Regulation (GDPR, in German: DSGVO); article references below refer to it.

1. Controller

No data protection officer has been appointed; the conditions requiring one are not met.

2. Visiting the website (hosting)

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When a page is requested, Vercel processes technically necessary access data, in particular the IP address, the time of the request, the address requested, the amount of data transferred, and browser and device information.

• Purpose: delivering the site, operational security, prevention of abuse.
• Legal basis: Art. 6(1)(f) GDPR — legitimate interest in operating the website securely and reliably.
• Retention: the access data is processed by Vercel and deleted there after a short period; we have no permanent access to these logs ourselves.
• Third-country transfer: a data processing agreement including the EU Standard Contractual Clauses under Art. 46(2)(c) GDPR is in place with Vercel.

3. Fonts

The site loads fonts from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). In doing so, the IP address of the requesting device is transmitted to Google. The legal basis is Art. 6(1)(f) GDPR (consistent presentation of the site). A transfer to the USA cannot be ruled out; Google relies on the EU Standard Contractual Clauses for this.

4. Waiting list

Anyone joining the waiting list provides an email address. No other information is collected.

• Purpose: a single notification once access becomes available.
• Legal basis: Art. 6(1)(a) GDPR — consent, given by submitting the form.
• Processor: the form is handled technically by Formspree Inc., 2093 Philadelphia Pike #1958, Claymont, DE 19703, USA. The address is transmitted there and then delivered by email.
• Retention: Formspree's free plan keeps the submission history for 30 days. The delivered email remains in the controller's mailbox beyond that, until the purpose no longer applies or consent is withdrawn.
• Third-country transfer: based on the EU Standard Contractual Clauses under Art. 46(2)(c) GDPR.
• Withdrawal: consent can be withdrawn at any time, informally, by email to hello@squally.dev. The address is then deleted. The lawfulness of processing carried out until then remains unaffected.

5. No cookies, no analytics

The website sets no cookies and embeds no analytics, tracking or advertising services. There is no profiling and no automated decision-making.

6. Your rights as a data subject

Under the GDPR you have the following rights:

• access to the data processed about you (Art. 15)
• rectification of inaccurate data (Art. 16)
• erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• objection to processing based on legitimate interests (Art. 21)
• withdrawal of consent with effect for the future (Art. 7(3))

An informal email to hello@squally.dev is enough for any of these.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority here is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

7. Changes

This policy will be updated whenever the processing changes — in particular when the product opens up. The version published here, with the date given above, is the one that applies.