Data & Privacy

Last updated: 31 October 2026

The controller for data processing on anyma is Wojtek Plichta, Tiefenbruchstraße 43a, 44651 Herne, Germany. Contact: hello@anyma.one. Our imprint has the full details.

This policy covers the anyma start screen — the page listing the projects. Each project processes its own data and has its own policy, linked from within it. If you have not opened a project, only this page applies to you.

1. Visiting this page

Simply opening the start screen creates no account, sets no cookie and stores nothing in your browser. Our host records standard server logs, which may include technical data such as your IP address, for security and to deliver the page. Legal basis: our legitimate interest in operating the site securely (Art. 6(1)(f)).

2. The suggestion form

If you send a project suggestion, we process the idea you write. You may also give an email address — this is optional, and we use it for one purpose only: to reply to your suggestion.

• Legal basis: your consent, given by sending the form (Art. 6(1)(a)). You can withdraw it at any time by writing to hello@anyma.one, without affecting earlier processing.
• The suggestion is stored with our database provider, Supabase (in the EU), and delivered to our inbox through our email provider, Resend.
• We delete your email address once the exchange is finished. The suggestion itself may be kept without it.
• If you leave the email field empty, the suggestion contains no personal identifier at all. Please do not write personal details into the free-text field.

3. Sign-ups for projects that have not opened yet

Some projects on the start screen are still in development — currently ching. Its tile opens a sign-up form where you can ask to be told when it opens. The same rules apply to every future project that offers this kind of sign-up before it launches.

• What we store: your email address, which project you signed up for, the time you gave consent, and whether and when you confirmed your address.
• What we send: one email straight away with a link to confirm your address (double opt-in). If you do not click it, you receive nothing more. If you do, we write to you once when the project opens. We send nothing else, and we do not pass your address on.
• Legal basis: your consent, given by sending the form and confirming the link (Art. 6(1)(a)). You can withdraw it at any time by writing to hello@anyma.one, without affecting earlier processing.
• Your address is stored with our database provider, Supabase (in the EU), and the emails are delivered by our email provider, Resend. If you sign up for more than one project with the same address, we keep one entry for it.

4. Cookies and local storage

This page uses no cookies of any kind — none for tracking, none for advertising, and none that are strictly necessary — and writes nothing to your browser's local storage. There is therefore no cookie banner. If we ever add non-essential cookies or third-party tracking, we will add a consent banner and ask first.

5. Analytics

There is no analytics or tracking of any kind on this page. We do not measure visits to the start screen and do not build a profile of you.

6. Hosting and international transfers

The site is hosted by Vercel. Our database provider, Supabase, stores data in the EU, so no transfer outside the EEA is involved there. Two providers are located in or transfer data to the United States: Vercel (hosting and server logs, which may include technical data such as IP addresses) and Resend (which delivers suggestion and sign-up emails).

Where data is transferred to the United States, it is safeguarded by appropriate measures under Chapter V of the GDPR, in particular the EU Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework, as set out in each provider's Data Processing Agreement, which we have accepted. You can request details at hello@anyma.one.

7. How long we keep data

• An email address given with a suggestion is kept only until the exchange about that suggestion is over, then deleted.
• An email address given in a project sign-up is kept until that project has opened and we have written to you, or until you withdraw consent — then deleted. Addresses that are never confirmed are deleted after 30 days.
• The suggestion text itself is kept so we can consider it when planning future projects.
• Server logs are kept for the period set by our host.

8. Your rights

You have the right to access, rectification, erasure, restriction, data portability, and objection, and where processing rests on consent, to withdraw it at any time. To exercise any of these, contact hello@anyma.one.

You may also complain to a supervisory authority. For North Rhine-Westphalia this is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

9. Changes

We may update this policy; the version published here, with the date above, is the current one.