Privacy Policy

Last updated: 6 October 2026

1. Who is responsible

Schlauch & Schlauch GbR, Eduard-Flach-Straße 20, 87700 Memmingen, Germany. Email: contact@smileyface.dev. Phone: +49 1588 8659392. More details are in our Imprint.

2. In short

This website has no user accounts and no advertising. We collect as little data as possible. Below we explain what happens when you visit the website or contact us.

3. Hosting and server logs

This website is hosted by Vercel Inc., USA. When you open a page, Vercel processes technical data such as your IP address, the date and time, the page you opened, and your browser and operating system. This is necessary to deliver the website and keep it secure. Vercel keeps these logs only for a short time.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure, working website. Data may be processed in the USA. This is based on the EU-U.S. Data Privacy Framework or on EU standard contractual clauses. We have a data processing agreement with Vercel.

4. Analytics with PostHog

We use PostHog to see which parts of this page are useful. PostHog is provided by PostHog Inc., USA. We use the PostHog EU cloud, so the data is stored on servers in the EU.

Without cookies (standard). PostHog runs without cookies and stores nothing on your device. We count page views, which sections you see, which buttons and links you click, and your choices in the contact form (type of project and budget range). We do not send your name, your phone number or the text you type. IP addresses are not stored. Every page visit counts as a new, anonymous visit. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in improving our website.

With cookies (only with your consent). If you click “Accept” in the cookie banner, PostHog saves a random ID in a cookie and in your browser’s local storage. This lets us recognise returning visitors. Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time with “Cookie settings” at the bottom of every page. If you decline, we delete these PostHog entries from your browser.

We do not record sessions. If your browser sends a “Do Not Track” signal, PostHog does not run. You can also object to the analytics at any time by email. We delete analytics data after 12 months at the latest. PostHog Inc. may access data from the USA. This is based on the EU-U.S. Data Privacy Framework or on EU standard contractual clauses. We have a data processing agreement with PostHog.

5. Data stored in your browser

We save your language and your cookie choice in your browser’s local storage, so the website remembers them on your next visit. This information stays on your device and is not sent to us. It is necessary for the service you asked for (§ 25(2) no. 2 TDDDG).

6. Fonts

Our fonts are stored on our own server. Your browser does not connect to Google or any other font provider.

7. Contact by WhatsApp, email or phone

Our chat buttons open WhatsApp with a message that is already filled in with your answers from the form. Nothing is sent until you press send in WhatsApp. WhatsApp is a service of WhatsApp Ireland Limited (Meta), and WhatsApp’s own privacy policy applies to its use.

When you contact us by WhatsApp, email or phone, we process your name, your contact details and your message to answer you and to prepare an offer. Legal basis: Art. 6(1)(b) GDPR (steps before a contract) and Art. 6(1)(f) GDPR (our legitimate interest in answering requests). We delete this data when we no longer need it, unless the law requires us to keep it, for example for tax reasons.

8. Links to other websites

This page links to other websites, for example to apps our team members have worked on. These websites only receive data from you when you click a link. Their own privacy policies apply.

9. Your rights

You have the right to:

  • get information about your data (Art. 15 GDPR)
  • have it corrected (Art. 16 GDPR)
  • have it deleted (Art. 17 GDPR)
  • restrict its processing (Art. 18 GDPR)
  • receive it in a common format (Art. 20 GDPR)
  • object to processing based on our legitimate interest (Art. 21 GDPR)
  • withdraw your consent at any time, with effect for the future (Art. 7(3) GDPR)

Just write to contact@smileyface.dev. You can also complain to a data protection authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA) in Ansbach.

10. No automated decisions

We do not make automated decisions or create profiles within the meaning of Art. 22 GDPR.

11. Changes

We update this policy when our website or the law changes. The current version is always on this page.

This is a translation. The German version is legally binding.