Privacy Policy

Information according to Art. 13 of the General Data Protection Regulation (GDPR) for the website corko.app.

Overview

This website is deliberately quiet: it sets no cookies, runs no JavaScript, uses no analytics or tracking services, and loads no third-party resources — even the fonts are self-hosted. The only processing that happens is what is technically required to deliver the page.

Controller

No data protection officer has been appointed; there is no obligation to do so. Further operator details are in the imprint.

Hosting and server logs

This website is delivered via Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (EU establishment: Cloudflare Germany GmbH, Rosental 7, 80331 Munich). When you access the page, Cloudflare technically processes your IP address along with details such as the requested URL, date and time of access, your browser's user agent and the referring page, in order to deliver the page and defend against attacks.

The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in providing this website securely and reliably. Cloudflare is bound as a processor under Art. 28 GDPR. Where data is transferred to the USA, this is based on the adequacy decision for the EU–US Data Privacy Framework, under which Cloudflare is certified, supplemented by standard contractual clauses. We do not keep server logs of visitors ourselves; technical logs at Cloudflare are retained only briefly. Details: cloudflare.com/privacypolicy

Waitlist

Joining the waitlist requires only an email address. Sign-up uses double opt-in: submitting the form triggers one confirmation email, and only clicking the link in it adds the address to the list — an unconfirmed address is not stored beyond sending that email.

The legal basis is Art. 6(1)(a) GDPR (consent). Processing is limited to the waitlist and, later, related early-access and launch emails — no third-party sharing beyond the processor below, no profiling. We use Brevo SAS (France; an EU company) as the sending platform under an Art. 28 GDPR data processing agreement. Details: brevo.com/legal/privacypolicy

Consent can be withdrawn at any time via the unsubscribe link in every email, or by contacting [email protected].

No sharing, no profiling

We do not sell data and do not share it beyond the processor named above. No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

Your rights

Under the GDPR you have the following rights:

• access to the data processed about you (Art. 15)
• rectification of inaccurate data (Art. 16)
• erasure (Art. 17) and restriction of processing (Art. 18)
• data portability (Art. 20)
• objection to processing based on legitimate interests (Art. 21)

To exercise them, contact [email protected]. You also have the right to lodge a complaint with a data protection supervisory authority — in Austria this is the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna (dsb.gv.at); you may also contact the supervisory authority of your own member state.

Last updated

Last updated: August 2026. The current version of this policy always lives at this address.