Privacy Policy

1. Controller

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:
Chataigner Lion
Hoffstraße 17, 66806 Ensdorf, Germany
Email: info@mule-vault.com

2. Your rights

You have the right at any time to:

Access the personal data we process about you (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure of your data (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to processing (Art. 21 GDPR)
Lodge a complaint with a data protection supervisory authority (Art. 77 GDPR)

3. Hosting

This website is hosted by Vercel Inc. When you visit the site, technical information such as your IP address, date and time of access, the page requested, and the browser used is automatically processed in server logs. This serves to deliver the site, ensure system security, and enable error analysis (Art. 6(1)(f) GDPR, legitimate interest in a secure and functioning service). More information: vercel.com/legal/privacy-policy.

4. Database (Supabase)

Product data, as well as the contact and takedown requests described below, are stored with Supabase Inc. A data processing agreement under Art. 28 GDPR is or will be in place with Supabase. [PLACEHOLDER: verify hosting region — if servers are located outside the EU, add a note on the third-country transfer and Standard Contractual Clauses.]

5. Local storage in your browser (localStorage)

To offer certain features without requiring a user account, this site stores strictly necessary, technical data locally in your browser (not on our servers):

Products you have favorited (so your saved list persists across visits)
Which products you have already reported (to prevent duplicate reports)
A counter of your reports in the current session (spam protection)

This data never leaves your browser and is not used for tracking or marketing purposes. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a functioning site without requiring a user account). You can delete this data at any time via your browser settings.

6. Contact form

If you send us a message via the contact form on the Legal Notice page, we store your name, email address, and message to process your request (Art. 6(1)(b) or (f) GDPR). This data is used solely to handle your request and is not shared with third parties.

7. Product report feature

The "Report if link doesn't work" button on product pages lets you flag that an external shopping link is broken. We only store which product was reported and when — no further personal data (Art. 6(1)(f) GDPR, legitimate interest in a functioning catalog).

8. Takedown requests

If you submit a copyright, trademark, privacy, or content-removal request via our Takedown Request page, we store your name, email address, request type, the URL you provided, and your message in order to review and process the request (Art. 6(1)(c) and (f) GDPR — compliance with legal obligations and legitimate interest in resolving rights-related complaints). This data is used solely for that purpose.

9. Cookies

This site does not use tracking or marketing cookies. Only strictly necessary local storage (see section 5) is used, which does not require consent under § 25 TDDDG. [PLACEHOLDER: if analytics or marketing tools such as Google Analytics are added later, a cookie consent banner will be required and this policy must be updated accordingly.]

10. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the lock icon in your browser bar and the address starting with "https://".

11. Changes to this policy

We reserve the right to update this privacy policy so that it always complies with current legal requirements. The version published at the time of your visit applies.