Privacy Policy

Effective date: November 6, 2026

This privacy policy applies to the website shapeganic.com. The ShapeGanic app has its own app privacy policy. This page is a translation of the German Datenschutzerklärung; if the two differ, the German version prevails.

1. Controller

Peter Getek
ShapeGanic (sole proprietorship)
Armenische Straße 8a
13349 Berlin
Germany
Email: info@shapeganic.com

2. Overview

When you visit this website, we process only a small amount of personal data: our host processes the connection data needed to deliver the pages, Google Analytics runs only with your consent, and we use what you enter in the contact form only to answer your request. Fonts, images and scripts come from our own server. We do not embed content from other providers, such as videos, maps or comment sections.

“TDDDG” is the German Telecommunications and Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz).

3. Hosting

The website is delivered through Firebase Hosting, a service of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Whenever you open a page, your browser sends technically necessary data to the server, in particular your IP address and the time and address of the page requested. According to Google, it uses the IP addresses to detect abuse and to provide us with usage statistics, and it keeps them for a few months.

Google processes this data as our processor under the Firebase data processing terms (Art. 28 GDPR). The legal basis is our legitimate interest in delivering the website securely and reliably (Art. 6(1)(f) GDPR). Data may also be transferred to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR).

4. Cookie banner and local storage

We do not set any cookies ourselves. In your browser’s local storage (localStorage) we keep only what the website and the features you choose need: the color setting of the site (light or dark) and your choice in the cookie banner with its date. Your choice is kept for twelve months; after that, we ask again. This information never leaves your device; storing it is permitted without consent under Section 25(2) no. 2 TDDDG. You can delete it at any time in your browser settings.

You can change or withdraw your choice in the cookie banner at any time through the “Cookie Settings” link in the footer of every page.

5. Google Analytics

With your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to see which pages are used and how, and to improve the website. For this, Google Analytics stores cookies in your browser (_ga and _ga_8B4PM4TCFV, each for up to two years) and processes usage data such as the pages you view, the time you spend on them, where your visit came from, device and browser details, and your approximate location. Google Analytics 4 does not log or store IP addresses. Google processes the data on our behalf (Art. 28 GDPR).

• Legal basis: your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Without your consent, Google Analytics is not loaded and no data is sent to Google.
• Transfer to the United States: Google may transfer data to Google LLC in the United States, which is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).
• Retention: Google deletes individual events, such as page views, after 2 months and user-level data after 14 months. If you visit the website again, the period for the user-level data starts over. Aggregated statistics that do not relate to individual visitors are kept.
• Withdrawal: you can withdraw your consent at any time with effect for the future through the “Cookie Settings” link in the footer of every page. This also deletes the Google Analytics cookies in your browser. In addition, you can install the Google Analytics opt-out browser add-on.
• More information: Google Privacy Policy

6. Site search

The search on this website runs in your browser. To do so, your browser loads parts of the search index from our server (see Hosting); your search terms themselves are neither transmitted nor stored.

7. Contact form and email

If you write to us through the contact form, the service Formspree (Formspree, Inc., USA) forwards your message with your name and email address to us. Formspree processes the data on servers in the United States, along with technical data such as your IP address, which Formspree uses among other things to block spam. According to Formspree, it bases the transfer to the United States on the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR). If you send us an email, we process the information in your email.

We use your information only to answer your request. The legal basis is our legitimate interest in doing so (Art. 6(1)(f) GDPR); if your request concerns a contract or steps toward one, for example about the app, it is Art. 6(1)(b) GDPR. We delete the information once your request has been dealt with, unless statutory retention obligations apply. More information: Formspree Privacy Policy

8. Amazon Associates program

This website takes part in the affiliate program of Amazon Europe Core S.à r.l. (Amazon.de); you can recognize affiliate links by their yellow underline. If you click an affiliate link, you go to Amazon. The affiliate ID in the link tells Amazon that you came from this website; Amazon may set cookies and processes data under its own responsibility to attribute purchases to the link. We receive only aggregated reports on clicks and orders from Amazon, no information about you as a person. The legal basis for the affiliate links is our legitimate interest in funding the website (Art. 6(1)(f) GDPR). More information: Amazon Privacy Notice

9. Links to other providers

Links to Google Play, Huawei AppGallery, Buy Me a Coffee and our social media profiles, as well as the share links below the articles, are plain links. Data is sent to the respective provider only when you click such a link; for the share links, this includes the address of the article. The respective provider is responsible for the processing on its site.

10. Fonts

We load the Inter font from our own server. This does not create any connection to Google or other providers.

11. Retention

We keep personal data only as long as necessary for the respective purpose or as long as statutory retention periods require. The specific periods are given in the sections above.

12. Your rights

You have the right to:

1. Access the data we hold about you (Art. 15 GDPR)
2. Rectification of inaccurate data (Art. 16 GDPR)
3. Erasure of your data (Art. 17 GDPR)
4. Restriction of processing (Art. 18 GDPR)
5. Data portability (Art. 20 GDPR)
6. Withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR)
7. Lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example with the authority responsible for us, the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59‑61, 10555 Berlin, Germany

To exercise your rights, an email to info@shapeganic.com is enough.

Right to object: Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defense of legal claims.

13. Providing data and automated decisions

You are not obliged to provide us with personal data. Without the technically necessary connection data, however, the website cannot be displayed, and without your contact details we cannot answer your request. We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

14. Security

The website is transmitted exclusively in encrypted form over HTTPS (TLS). We also protect data through technical and organizational measures such as access controls.

15. Changes to this privacy policy

We update this privacy policy when the website or the legal situation changes. The version published on this page applies.

---

Location of the controller: Berlin, Germany
Last updated: November 6, 2026