Privacy Policy

1. Data Controller

4houses Ventures UG (haftungsbeschränkt)
Loogestieg 19, 20249 Hamburg, Germany
Email: see Impressum

2. Overview

This research website has no visitor accounts, advertising or data-collection forms. We use limited, cookie-free usage analytics to understand which pages are useful and improve navigation. We do not use session recordings, heatmaps, advertising identifiers or cross-site user profiles.

3. Hosting

This website is hosted by Fly.io, Inc. (Chicago, IL, USA). When you visit this site, Fly.io's servers automatically process certain technical data required for delivering the page to your browser:

  • IP address
  • Date and time of the request
  • Requested URL and referrer
  • Browser type and operating system

This processing is necessary for the operation of the website and is based on our legitimate interest (Art. 6(1)(f) GDPR). Server log data is not combined with other data sources and is automatically deleted after a short retention period. Fly.io processes data as a processor on our behalf.

As Fly.io is based in the United States, data may be transferred to the US. Fly.io participates in appropriate safeguards for international data transfers.

4. No Cookies

This website does not set analytics cookies. If you opt out below, we save a local preference in this browser solely to remember that choice. Clearing browser storage removes that preference. The site remains usable when analytics is blocked or disabled.

5. Limited Usage Analytics

We use Umami Cloud, provided by Umami Software, Inc., 28 Geary St, Suite 650 #243, San Francisco, California, United States, as our analytics processor. We use aggregate reports to assess readership, identify useful pages and improve the evidence browser and charts.

  • Page address and title, with query strings and URL fragments removed.
  • Referring website origin only, without the referring page path or query parameters.
  • Browser, operating system, device/screen information and browser language; approximate location and visitor/session estimates derived by Umami.
  • Interactions with prediction navigation, research-domain filters and chart controls, recorded using predefined categories without free-text input.

Your browser sends these measurements directly to Umami, which also processes your IP address and browser request headers to provide the service. We do not send names, email addresses, free-text entries or personal account identifiers. We use aggregate statistics to understand readership rather than identify individual visitors.

We rely on our legitimate interest in understanding and improving this research website (Art. 6(1)(f) GDPR), with collection minimized as described here. You can object at any time through the opt-out below. We also honor the browser's Do Not Track and Global Privacy Control signals.

Umami Cloud uses infrastructure in the EU and US. Data may be transferred outside the EEA. Umami's Data Processing Agreement incorporates EU Standard Contractual Clauses where applicable. Its subprocessor list identifies supporting providers.

Our retention policy limits analytics records to six months. We may retain monthly aggregate statistics for longer to compare readership over time. These summaries do not include individual visitor or session records. See Umami's privacy policy for further information about its processing.

Control analytics in this browser

JavaScript is needed for analytics and these preference controls. With JavaScript disabled, no analytics is sent.

Disable analytics in this browser · Remove this browser's opt-out

The preference applies only to this browser and origin. Do Not Track or Global Privacy Control continue to take precedence even if you remove the opt-out. For other objections or requests, contact the controller listed above.

6. External Links

This site contains links to external websites. We have no control over the content or privacy practices of those sites. Please review their respective privacy policies.

7. Your Rights

Under the GDPR, you have the right to:

  • Request information about any personal data we process (Art. 15 GDPR)
  • Request correction of inaccurate data (Art. 16 GDPR)
  • Request deletion of your data (Art. 17 GDPR)
  • Request restriction of processing (Art. 18 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Data portability (Art. 20 GDPR)
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

The competent supervisory authority is the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI).

8. Changes

We may update this privacy policy from time to time. The current version is always available at this URL.

Last updated: 19 September 2026