← The Human After AI
ENDE

Privacy Policy

Datenschutzerklärung · in force from the launch date · last updated 2026-07-04

This policy explains what personal data we process when you use thehumanafter.ai, why, on what legal basis, and the rights you have. We collect as little as possible and use privacy-friendly, self-hosted analytics — there is no advertising tracking and no cookie banner is required in the current setup.

1. Controller

The controller responsible for data processing on this site is:

Jonas Weismueller
Durmersheimerstr. 20c
76185 Karlsruhe
Email: [email protected]

2. What we collect, why, and the legal basis

Waitlist

When you join the waitlist we store your email address and two short attribution tags — source (which button you used) and ref (the channel/campaign you came from, derived from the link’s UTM parameters or referrer). Purpose: to send you the cast reveal and, later, the newsletter. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Stored until you unsubscribe or ask us to delete it.

Story intake (done-for-you)

If you submit the “tell us your story” form (/your-story) we store your email, optional name, and the optional free-text note you write. Purpose: to answer your inquiry. Legal basis: steps prior to a possible contract and/or your consent (Art. 6(1)(b)/(a) GDPR). Please do not include special-category data (Art. 9 GDPR — e.g. health, religion, political views) in the free-text field; it is not required and we ask you not to submit it. Stored for the duration of the inquiry and a reasonable follow-up period.

Votes

If a voting feature is active, we store your choices and — where you opt in to see results — your email address. Purpose: to record and aggregate votes and send the outcome. Legal basis for the email: your consent (Art. 6(1)(a) GDPR).

To allow one vote per person without an account, we also derive a salted hash of your IP address and browser user-agent and store only that hash together with your vote — never the raw IP address or user-agent. It is not linked to your name or account and is used solely to prevent duplicate voting. Legal basis: our legitimate interest in a fair tally (Art. 6(1)(f) GDPR).

Topic suggestions

If you suggest an episode topic (/vote) we store the title and optional note you write and, optionally, your email address if you want to hear back. Purpose: considering the topic for a future episode. Legal basis: your consent (Art. 6(1)(a) GDPR). Please do not include personal stories or special-category data (Art. 9 GDPR) — a topic name is enough. Stored until the suggestion has been reviewed.

Sign-in (one-time code)

The Studio sign-in uses a one-time code sent to your email. On success we set a strictly necessary session cookie to keep you signed in. Purpose and legal basis: providing the service you requested (Art. 6(1)(b) GDPR); the session cookie is exempt from consent because it is technically required (§25(2) TDDDG).

3. Analytics — self-hosted, cookieless (Umami)

We use Umami, an open-source analytics tool we host ourselves. It counts page views and records aggregate signals such as the referring page and UTM campaign, so we can see which channels work. It sets no cookies, stores nothing on your device, does not fingerprint you, and does not track you across other websites.

§25 TDDDG assessment: because the analytics neither store information on, nor read information from, your device, the consent requirement of §25(1) TDDDG does not apply. The subsequent processing of the aggregate data rests on our legitimate interest in a privacy-friendly understanding of site usage (Art. 6(1)(f) GDPR); your interest not to be tracked is respected by the cookieless, self-hosted design. IP addresses are processed only transiently to derive coarse, non-identifying signals and are not stored in raw form.

4. Hosting and content delivery (Cloudflare)

The site is delivered through Cloudflare as a proxy/CDN and security layer. Cloudflare processes connection data (including your IP address) on our behalf as a processor (Art. 28 GDPR; the data-processing terms are incorporated into Cloudflare’s standard terms). Some processing may occur on servers in the USA, i.e. a third-country transfer. Cloudflare is certified under the EU–U.S. Data Privacy Framework, so the transfer relies on an adequacy decision (Art. 45 GDPR). Legal basis for using a CDN/security proxy: our legitimate interest in a fast, available and secure site (Art. 6(1)(f) GDPR).

5. Newsletter (upcoming)

When the newsletter goes live it will be delivered by an email service provider under a data-processing agreement, with double opt-in and a one-click unsubscribe in every issue. This section — including the provider and its transfer safeguards — will be completed before the first issue is sent. Until then, waitlist emails are stored only in our own database.

6. Recipients & transfers

We do not sell your data. Data is processed by the controller and by the processors named above (analytics is self-hosted; Cloudflare as CDN/proxy). Any transfer to a third country relies on the safeguards named in the relevant section (e.g. the Data Privacy Framework for Cloudflare).

7. Your rights

Under the GDPR you have the right to:

  • access your data (Art. 15);
  • rectification (Art. 16) and erasure (Art. 17);
  • restriction of processing (Art. 18);
  • data portability (Art. 20);
  • object to processing based on legitimate interest (Art. 21);
  • withdraw consent at any time, without affecting prior processing (Art. 7(3)).

To exercise any of these, email us at [email protected]. You also have the right to lodge a complaint with a data-protection supervisory authority — in Germany, the authority of your or our federal state.

8. Cookies & local storage

We use no advertising or tracking cookies. The only cookie is the strictly necessary session cookie set after you sign in to the Studio. We also use your browser’s local storage for a few first-party, functional purposes only — for example remembering that you joined (so the page stays visually consistent on your return) and your vote selections. These stay on your device, are not used for tracking or advertising, and are not shared with third parties. Because there are no non-essential cookies and no cross-site tracking, no cookie consent banner is required.

9. Data security & changes

We apply appropriate technical and organisational measures to protect your data. We may update this policy as the site evolves (e.g. when the newsletter or paid products launch); the “last updated” date above reflects the current version.

Impressum →