Privacy notice

1. Controller and contact

The controller responsible for this website's processing of personal data is:

Legal notice

2. Hosting and security

The site is hosted through OpenAI Sites using Cloudflare infrastructure. Technical information—including IP addresses, requested resources, timestamps, browser or device details and security signals—is processed to deliver pages and protect against abuse.

The hosting platform also produces traffic statistics, including page views and unique-visitor counts. We have not added a separate advertising or analytics SDK. We have not confirmed the platform's precise method of distinguishing visitors and do not claim these statistics are anonymous or cookie-free.

Our legal basis is the legitimate interest in providing a secure, available website and understanding its use through the platform's traffic totals (Article 6(1)(f) GDPR). Essential request information is needed to deliver a page online.

OpenAI processes hosted data under its applicable data-processing terms, with Cloudflare providing delivery and hosting services. Processing is international and is not guaranteed to remain in Germany or the EU. OpenAI's terms describe transfer safeguards, including standard contractual clauses or an adequacy decision.

Technical logs and recovery copies are managed by the hosting providers for service delivery, security, recovery and legal obligations. We do not maintain a separate browsing-history database. The specific retention periods for managed-hosting logs, traffic statistics, underlying traffic data and recovery copies remain unconfirmed. Contact us for further details or a copy of applicable transfer safeguards.

OpenAI Sites data-processing terms · OpenAI subprocessor list · Sites hosting and traffic statistics · Cloudflare privacy policy

3. Cookies and language choice

• misfit-mind-language: set when you choose a display language, to remember that preference for the browser session. It contains no email address. Language-specific URLs also work without this preference cookie.
• Cloudflare security cookies: __cf_bm helps distinguish ordinary browsing from automated abuse and normally expires after 30 minutes of continuous inactivity.

Necessary device storage and access for the requested language function and security are handled under § 25(2) TDDDG. Related personal-data processing relies on our legitimate interest in providing those functions securely (Article 6(1)(f) GDPR). You can clear or restrict cookies in your browser; this may affect language preferences or security checks.

Cloudflare's cookie documentation

4. App interest requests

Adults may voluntarily register an interest in future opportunities to try the apps. You can read the public website without registering. A request does not create an app account or provide prototype access.

We store your email address, selected language, request time, consent-text version and a hash of a secret used to undo a new request. There is no field for information about a child. The legal basis is your voluntary consent (Article 6(1)(a) GDPR). An email address and consent are needed to register the request.

Requests are stored in the private Cloudflare D1 database provided through OpenAI Sites. The subscriber list is not shown on the website and is not currently transferred to an email delivery service. We retain an entry until the readiness-update purpose has been fulfilled, the project closes or consent is withdrawn, whichever happens first, and review whether retaining interest requests remains necessary.

A new request can be undone on its confirmation screen. You can also withdraw consent later by emailing the contact above. Withdrawal does not affect earlier lawful processing. Deletion from the active request table is distinct from immediate deletion of every hosting recovery copy.

5. Email correspondence

We process your address, message and information needed to respond when you email us. Correspondence is handled through Apple's iCloud Mail. Ordinary enquiries rely on our legitimate interest in responding (Article 6(1)(f) GDPR); handling statutory data-rights requests relies on our legal obligations (Article 6(1)(c)). Correspondence is retained until the matter is resolved and no longer needed for follow-up or legal obligations.

Apple operates internationally. Its privacy policy describes processing in the United States and other countries and the use of standard contractual clauses for applicable EEA transfers. Apple privacy policy

Please do not send a child's assessments, diagnoses or private school correspondence.

6. External links and search

Video links open YouTube; there is no embedded YouTube player on this site. Following a source or other external link takes you to a service with its own privacy practices.

We may use Google Search Console to review how public pages appear in Google Search. Search Console does not add visitor-tracking code to this website.

7. Your rights

Subject to applicable conditions, you can request access, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation, and withdraw consent at any time. This website does not make automated decisions producing legal or similarly significant effects.

Send requests to the contact above. We may request additional information where reasonably necessary to confirm your identity and protect personal data against unauthorised disclosure or changes.

You also have the right to complain to a data-protection authority, including in your place of residence, work or the alleged infringement. The Berlin authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit. Authority contact and complaint information