Privacy Policy

Controller

Company

RNM Rainmaker GmbH

Register

FN 505325 a, Commercial Court Vienna

Address

Auerspergstraße 1, 1080 Vienna, Austria

Email

office@creatorstackapp.com

The controller responsible for the processing described here is:

The short version

You can read every page of this site without giving us anything and without any third party learning that you visited. Fonts, styles, scripts, images and video all come from our own domain, and our web server writes no access log, so ordinary browsing leaves no record of your IP address anywhere in our systems.

Two things change that, and only when you choose them. If you submit the application form, we receive what you typed and Cloudflare checks that you are a person. If you accept the cookie notice, PostHog measures how the site is used, including a recording of your visit. Decline it and PostHog is never loaded.

The application form

When you apply for a partnership we process the name and email address you enter and whatever you write in the message field. Two hidden fields are submitted with it: an empty decoy field that only automated scripts fill in, and the number of milliseconds between the page loading and you pressing send. Both are used once, to decide whether the submission is human, and are not stored.

We use your details to assess your application and to reply to you. The legal basis is Art. 6(1)(b) GDPR for steps taken at your request before a contract, and Art. 6(1)(f) GDPR for our legitimate interest in answering enquiries. Providing the data is voluntary, but without it we cannot assess an application or write back.

We do not sell your details and we do not add you to a marketing list. Applications reach our mailbox and stay there while we assess them and for as long as we need a record of the decision; we delete them at the latest three years after our last contact with you, unless we are working together by then or the law requires us to keep them longer.

Spam protection on the form

The contact page loads Cloudflare Turnstile, which distinguishes people from scripts without puzzles or tracking cookies. For this, your browser contacts challenges.cloudflare.com and Cloudflare receives your IP address and technical information about your browser. This is the only third-party request any page of this site makes before you have consented to anything, and it happens on the contact page alone.

The legal basis is our legitimate interest in keeping the form usable and free of abuse (Art. 6(1)(f) GDPR). Turnstile is designed not to profile visitors and Cloudflare states that it does not use the data for advertising.

What happens to a submitted form

Your submission goes to a small program of ours running on Cloudflare's network, which verifies the Turnstile result and then hands the message to Resend, our email provider, to deliver to office@creatorstackapp.com. That address is a Cloudflare Email Routing address which forwards to a Google Workspace mailbox we read. Replies we send leave through Resend as well.

Each of these providers therefore processes your name, email address and message in transit or at rest, as our processor under Art. 28 GDPR.

Hosting and server logs

The site runs on a server we rent from DigitalOcean in Frankfurt am Main, Germany. Both the web server and the reverse proxy in front of it have access logging switched off, so we do not keep a record of which IP addresses requested which pages. Short-lived technical error output may be produced if something breaks and is not retained.

Our domain uses Cloudflare as its DNS provider. DNS queries for creatorstackapp.com are therefore answered by Cloudflare, which processes them to resolve the name.

The legal basis for operating and securing the site is Art. 6(1)(f) GDPR.

Analytics and session recording

With your consent we use PostHog to understand how the site is used: which pages people open, how they move between them, and a replay of the visit reconstructed from those interactions. We look at it to find where the site confuses people, not to identify anyone.

Nothing is loaded and nothing is collected until you accept the cookie notice. The analytics code is not even requested from our server before that. If you decline, or simply ignore the notice, PostHog never runs.

Every input, textarea and select is masked in recordings, so what you type into the application form is not captured. We ask PostHog not to build a profile for visitors who are not logged in, and we operate no login on this site.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 165(3) TKG 2021. You can withdraw it at any time by clearing this site's cookies and local storage in your browser, which removes both your recorded answer and PostHog's own identifiers; withdrawal does not affect processing that already happened.

PostHog processes the data on EU infrastructure in Frankfurt am Main, Germany, as our processor. Recordings and events are deleted after PostHog's standard retention period of at most one year.

Cookies and local storage

This site sets no advertising cookies and no cross-site trackers. Everything it stores is listed here.

Who we share data with

We use the following processors. Each is bound by a data processing agreement, and transfers outside the EU rest on the European Commission's Standard Contractual Clauses together with the EU-US Data Privacy Framework where the provider is certified.

No automated decisions

We do not use automated decision-making or profiling in the sense of Art. 22 GDPR. A human reads every application.

Your rights

You have the right to ask for access to the personal data we hold about you (Art. 15), to have it corrected (Art. 16) or erased (Art. 17), to have its processing restricted (Art. 18), to receive it in a portable form (Art. 20), and to object to processing we base on legitimate interest (Art. 21). Where we rely on consent, you can withdraw it at any time.

Write to office@creatorstackapp.com and we will answer within one month. We may ask you to confirm your identity first, only so far as needed to be sure we are not disclosing someone else's data.

If you think we are handling your data unlawfully you can complain to the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb.gv.at.

Changes to this policy

We update this page when what the site actually does changes. The date above tells you which version you are reading.