Privacy Policy

Privacy Policy

Last updated: 12.12.2025

This privacy policy explains how personal data is processed when you use the Lavanu early-access landing page. Lavanu is currently operated by an individual based in Germany.

1. Data Controller

The controller responsible for data processing on this website is:

Daniel Piringer

Spalatinstr. 40A

81739 Munich

Germany

Email: daniel.piringer@online.de

2. Data We Collect

2.1 Data you submit voluntarily

When you sign up for early access to Lavanu, you may provide the following personal data:

  • • Email address
  • • Team size
  • • Optional free-text message

This data is used exclusively to manage early-access communication and to better understand potential use cases.

2.2 Protection against automated submissions (hCaptcha)

This website uses hCaptcha, a service provided by Intuition Machines, Inc. (USA), to protect the form against automated abuse.

When hCaptcha is loaded, technical data may be processed, including:

  • • IP address
  • • Browser and device information
  • • Interaction patterns
  • • Referrer URL

hCaptcha may set cookies or use similar technologies as part of its security functionality.

For more information, please refer to hCaptcha’s privacy policy: https://www.hcaptcha.com/privacy

2.3 Honeypot field

In addition to hCaptcha, a honeypot field is used to detect automated submissions. This mechanism does not process personal data from legitimate users.

2.4 Server logs

When accessing this website, standard server log files may be generated. These logs may include:

  • • IP address
  • • Date and time of access
  • • Referrer URL
  • • Browser type and operating system

Server logs are used solely for security, stability, and troubleshooting.

3. Analytics (Cookieless)

This website uses a minimal, self-hosted analytics solution to understand how the landing page is used.

The analytics system:

  • • Does not use cookies
  • • Does not create user profiles
  • • Does not track users across websites
  • • Does not store IP addresses

Only aggregated events such as page views and form submissions are recorded.

4. Web Fonts (Geist)

This website uses the Geist font family (Geist and Geist Mono), which is licensed under the SIL Open Font License and originally distributed via Google Fonts.

However, the font files are hosted directly on our server and served locally. No connection to Google servers or any external font provider is established when you visit this website.

This means:

  • • No data is transmitted to Google
  • • No external requests are made to load fonts
  • • Your IP address is not shared with third-party font providers

5. Purpose and Legal Basis

5.1 Early-access communication (Art. 6(1)(b) GDPR)

Processing is necessary to respond to your early-access request and to communicate about the beta program.

5.2 Website security and abuse prevention (Art. 6(1)(f) GDPR)

hCaptcha, honeypot fields, and server logs are used based on legitimate interest to protect the website against misuse.

5.3 Analytics (Art. 6(1)(f) GDPR)

Aggregated analytics data is processed to evaluate and improve the landing page.

6. Data Storage and Retention

  • • Early-access data is stored until the beta program is completed or until deletion is requested.
  • • Server logs are typically retained for up to 30 days.
  • • hCaptcha data is stored according to the provider’s retention policies.

7. Data Sharing and Processors

7.1 Supabase

Data is stored using Supabase (Supabase Inc.), which provides managed database and infrastructure services under GDPR-compliant agreements.

7.2 Telegram

A Telegram bot is used to send internal notifications when a new early- access request is submitted. No personal data is shared with Telegram beyond what is required for internal notification.

7.3 hCaptcha

hCaptcha is provided by Intuition Machines, Inc. (USA). Data may be transferred outside the EU.

8. International Data Transfers

Where data is transferred outside the EU (e.g., via hCaptcha), such transfers are based on:

  • • The EU-U.S. Data Privacy Framework
  • • Standard Contractual Clauses, where applicable

9. Your Rights

  • • Right of access
  • • Right to rectification
  • • Right to erasure
  • • Right to restriction of processing
  • • Right to data portability
  • • Right to object
  • • Right to withdraw consent

To exercise these rights, contact: daniel.piringer@online.de

10. Children's Privacy

This website is not intended for individuals under the age of 16. No data from children is knowingly collected.

11. Changes to This Policy

This privacy policy may be updated as the Lavanu project evolves. The current version is always available on this page.

12. Contact

Daniel Piringer

Spalatinstr. 40A

81739 Munich

Germany

Email: daniel.piringer@online.de