Legal

Privacy Notice

This notice covers everything this site does with data: what happens when you simply visit, what we collect when you join the waitlist, what happens when you email us, who processes data on our behalf, and the rights you have.

Last updated: 2026-09-13

Who is responsible

Niklas Hall, Germany.
E-Mail: sales@superhuman-remote-worker.com
Telephone: +49 176 56527664

These are the same details as in our Impressum.

What this site does

superhuman-remote-worker.com is a static informational site. It sets no cookies and keeps no user accounts on this domain. It has one form — the waitlist — described below. All fonts are served from our own server; no request is made to Google Fonts or any other font provider.

Data we collect

When you visit. Delivering the site involves technically necessary connection data: your IP address, date and time, the page requested, browser and operating system, and the referring page. This is processed by Cloudflare, which serves the site, and by our web server. Legal basis: our legitimate interest in operating the site securely and preventing abuse, Art. 6(1)(f) GDPR. It is kept only as long as secure operation requires and then deleted.

When you join the waitlist. When you submit the form, we collect:

• your email address
• your interest in hosted SRW (recorded as hosted)
• your optional selection of what you would like to build
• how you reached the site: taken from the utm_source parameter in the link you followed, or the domain of the page that linked to you. We don't ask you for this, and it's recorded as "direct" when neither is present
• the timestamp of your submission
• technical connection data, including your IP address, processed by Cloudflare to deliver this site and to rate-limit abuse of the form

When you email us. We process your message and the contact details in it to handle your request. Legal basis: Art. 6(1)(b) GDPR where the request is about entering a contract with us, otherwise our legitimate interest in answering it, Art. 6(1)(f). The data is deleted once the matter is closed, unless a statutory retention duty requires otherwise.

Pilot enquiries. The pilot contact link opens an email to our sales address. We use your message to discuss that enquiry; emailing us does not subscribe you to the hosted-launch list.

Legal basis

Form data (your email, deployment preference, use case, how you reached the site, and submission timestamp) is processed on the basis of your consent, Art. 6(1)(a) GDPR, requested through the hosted-launch form and confirmed using the email confirmation link.

Technical connection data (your IP address) is processed on the basis of our legitimate interest, Art. 6(1)(f) GDPR, in delivering this site and preventing abuse of a public form endpoint. This also applies to requests blocked by abuse controls.

Purpose

Form data: to notify you when the hosted product launches. Nothing else.

Technical connection data: solely to deliver this site and to detect and rate-limit abuse of the form.

Processors

We don't operate a signup database ourselves. The form submits directly to a Cloudflare Worker running at the network edge, which calls Brevo's double opt-in API. Brevo creates a pending contact and emails you a confirmation link; only once you confirm does it become an active subscription.

• Brevo (Sendinblue GmbH) — EU-based. Stores your contact record and sends the confirmation email and the launch notification.
• Cloudflare — Cloudflare, Inc., US-based; its EU establishment is Cloudflare Germany GmbH, Rosental 7, 80331 München. Operates the CDN this site is served from, the protection against attacks, the Worker that receives your form submission, and Web Analytics, which is cookieless and doesn't track you individually. Cloudflare's own notice: cloudflare.com/privacypolicy.

Cloudflare is based outside the EU/EEA, so using its service involves an international transfer of your data. Where that happens, it's covered by an approved safeguard — the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses — as implemented by that processor.

External links

This site links to our repository on GitHub and, by mail link, to our contact address. The linked services' own privacy notices apply there.

Retention

Form data: unconfirmed sign-ups are deleted after 30 days. Once confirmed, we keep your contact record until you unsubscribe or until we retire the waitlist — for example, once the hosted product has launched.

Technical connection data: retained only as long as needed to deliver this site and to detect and rate-limit abuse of the form.

Email correspondence: deleted once the matter is closed, unless a statutory retention duty applies.

Your rights

• Access to the data we hold about you (Art. 15 GDPR)
• Rectification (Art. 16), erasure (Art. 17), and restriction of processing (Art. 18)
• Portability of the data you provided in the form, where processing is based on your consent (Art. 20)
• Objection to processing carried out under legitimate interest (Art. 21)
• The right to lodge a complaint with a supervisory authority. The authority competent for us is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany; you may also complain to the authority in your own member state.

You can withdraw your consent at any time using the unsubscribe link in any email we send, without affecting the lawfulness of processing carried out before the withdrawal.

Contact

For questions about this notice or to exercise your rights, use the details under "Who is responsible" above.