Protecting your data matters especially for a program like this. We only process what we need for the program, your purchase and — with your consent — measuring our advertising. This policy is based on the EU General Data Protection Regulation (GDPR).

1. Controller

Heritsch Media GmbH, Doblerstraße 18, 8501 Lieboch, Austria
Email: impressum@heritsch-media.at · Privacy requests: hallo@reboot-protokoll.de

2. Data we process

• When you visit the website: IP address (stored only truncated/hashed), browser, device, language, approximate region (country/city), pages viewed, source (e.g. an ad, campaign parameters such as utm_source, click IDs).
• When you fill in a form or quiz: email address, first name, your answers and result.
• When you buy: name, email, product, amount, payment status. Payment details (e.g. card number) are handled exclusively by our payment provider Whop — we never see them.
• In the member area: login data (password stored only encrypted), progress, your answers to daily questions, check-ins and relapse entries.

Particularly sensitive information: answers in the quiz and the program may reveal information about your sex life (Art. 9 GDPR). We process this information only with your explicit consent and solely to deliver and improve the program. We never share it with advertising platforms.

3. Purposes and legal bases

• Providing the website and security — legitimate interest (Art. 6(1)(f) GDPR)
• Delivering the program and processing purchases — contract (Art. 6(1)(b) GDPR)
• Program answers relating to your sex life — explicit consent (Art. 9(2)(a) GDPR)
• Emails with information and offers — consent (Art. 6(1)(a) GDPR), withdrawable at any time
• Analytics, ad performance measurement, Meta Pixel — consent via the cookie banner (Art. 6(1)(a) GDPR)
• Accounting and statutory retention — legal obligation (Art. 6(1)(c) GDPR)

4. Cookies

• rp_vid (necessary, 400 days): anonymous visitor ID so forms and sessions match and page variants (A/B tests) stay consistent
• rp_consent (necessary, 1 year): stores your cookie choice
• rp_session (necessary, 30 days): member area login
• rp_locale (necessary): your language
• _fbp, _fbc (marketing, 90 days, consent only): Meta Pixel to measure which ads work

You can change your choice at any time via "Cookie settings" in the footer.

5. Meta Pixel and Conversions API

With your consent we use the Meta Pixel of Meta Platforms Ireland Ltd. and additionally send events (page view, sign-up, purchase) server-side with encrypted (hashed) identifiers such as your email address. The content of your answers is never sent. We are joint controllers with Meta for collection and transmission (Art. 26 GDPR); Meta may transfer data to the USA (EU-US Data Privacy Framework). More: facebook.com/privacy/policy.

6. Recipients and service providers

• Vercel Inc. (USA) — website hosting, servers in Frankfurt; EU-US Data Privacy Framework + standard contractual clauses
• Supabase Inc. (USA) — database and file storage, servers in Frankfurt; data processing agreement, standard contractual clauses
• Whop Inc. (USA) — payment processing and receipts
• Resend Inc. (USA) — sending emails (login links, purchase confirmation, program emails)
• Meta Platforms Ireland Ltd. — see section 5 (consent only)
• Tax advisors and authorities where required by law

We have data processing agreements or appropriate safeguards for third-country transfers in place with all providers.

7. Retention

• Leads (form/quiz without purchase): up to 3 years after the last contact, deleted immediately on withdrawal
• Member account and program data: as long as your account exists; deletable on request at any time
• Purchase and invoice data: 7 years (Austrian tax law)
• Technical visit data: at most 26 months

8. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent at any time with effect for the future. You can export your program data yourself under "Profile" in the member area. Write to hallo@reboot-protokoll.de.

You may also lodge a complaint with a supervisory authority, e.g. the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

9. Automated decisions

Your quiz result is calculated automatically from your answers and is for your orientation only. It has no legal or similarly significant effect on you (no automated decision within the meaning of Art. 22 GDPR).

Last updated: October 14, 2026