Privacy Policy

Information required under GDPR (Art. 13/14) and the German TTDSG (§ 25).

1. Controller

Max Wagner

Zum Aubühl 5

95326 Kulmbach

Germany

Email: contact@everythingbuiltwith.com

2. What we process and why (summary)

We process personal data only to run this website and provide the product, or where you have given consent, or where another legal basis applies.

Website delivery & security (Vercel hosting): technical logs and access data (e.g. IP address, timestamps, requested URLs, user agent). Legal basis: Art. 6(1)(f) GDPR.
Accounts & authentication (Clerk): sign-up, sign-in, and session management (e.g. email, auth/session identifiers, security metadata). Legal basis: Art. 6(1)(b) GDPR; and Art. 6(1)(f) GDPR (security).
App data storage (Convex): storing and retrieving app data (e.g. profiles, tech stacks and related metadata). Legal basis: Art. 6(1)(b) GDPR.
Analytics (PostHog): usage analytics to improve the product. Only with consent. Legal basis: Art. 6(1)(a) GDPR; § 25(1) TTDSG.

3. Hosting (Vercel)

This website is hosted via Vercel. For delivery and security, Vercel processes technical data (e.g. IP address, timestamps, requested pages, user agent).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation).

International transfers: Depending on provider setup, data may be processed outside the EU/EEA (e.g. in the US). Where applicable, transfers rely on appropriate safeguards (e.g. EU Standard Contractual Clauses) and/or adequacy decisions.

4. Authentication (Clerk)

We use Clerk for registration, sign-in and session management. Depending on how you use the service, this may include email address, authentication/session identifiers and security metadata needed to provide and protect logins.

Legal basis: Art. 6(1)(b) GDPR (contract / steps prior to entering into a contract) and Art. 6(1)(f) GDPR (security, abuse prevention).

Storage on your device: Clerk uses technically necessary cookies and/or local storage for login/session functionality. Legal basis: § 25(2) no. 2 TTDSG (strictly necessary).

5. Database & app backend (Convex)

We use Convex to store and process app data (for example: tech stacks, reasons/metadata, user profiles). Processing is necessary to provide product functionality and operate the service securely.

Legal basis: Art. 6(1)(b) GDPR (service provision).

6. Analytics (PostHog)

If you consent, we use PostHog to understand how the product is used (e.g. page views, interactions, events) so we can improve it. PostHog may use cookies or similar technologies and process technical information (e.g. IP address, device/browser data) and event data.

Legal basis: consent under Art. 6(1)(a) GDPR and § 25(1) TTDSG. Without consent, PostHog tracking does not run.

Withdrawal: you can withdraw your consent at any time with effect for the future by changing your cookie/tracking settings (if available) or by deleting stored cookies/local storage data.

7. Recipients & processors

We use service providers (processors) for hosting, authentication, analytics, and infrastructure (e.g. Vercel, Clerk, PostHog, Convex). Where required, we enter into data processing agreements.

8. Retention

We keep personal data only as long as needed for the purposes above or as required by law. Server logs are typically kept for a limited period. Account and app data are processed for as long as your account exists; after deletion, data may be retained where legally required or to establish, exercise, or defend legal claims.

9. Your rights

Subject to the GDPR, you have the right of access, rectification, erasure, restriction of processing, data portability, and to object to certain processing (Art. 15–21 GDPR). If processing is based on consent, you can withdraw it at any time (Art. 7(3) GDPR).

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

10. Updates to this policy

We may update this policy if legal requirements or our processing activities change. The current version is published on this page.