Skip to content

Explore

Privacy

Privacy Policy

This page explains in a calm, readable form which data is processed across the website, contact flow, and join flow, and where external service boundaries begin.

Controller

Karl Philipp Nolte

Contact

hello@wateristheholygrail.com

Brevo

Used for signup and contact delivery

V

Optional YouTube film

The poster and readable transcript are served by this website. The external YouTube player is loaded through youtube-nocookie.com only after you choose “Watch the film”. The film block does not connect to YouTube before that action.

Starting playback sends technical connection data to YouTube/Google, including your IP address and information about your browser and the referring website. Privacy-enhanced mode does not mean anonymous playback. Further processing is governed by Google’s privacy policy.

“Close player” removes the embedded player from this page. It does not recall data already transmitted. Loading the page again requires another deliberate start. The transcript and free reading remain available independently; “Open on YouTube” instead takes you directly to the external platform.

Google privacy policy
K

Career Compass: free access

Links to the free Career Compass open a separate application provided by Karl Philipp Nolte on Vercel. This access mode does not connect to a Compass account or an AI API. Career entries initially remain in the browser tab and are not sent to the Compass server. Loading the application may involve necessary technical access data, such as IP address and time, as described in the hosting section.

You can download a file or explicitly save your work on your own device. A browser copy stays there until removed through the app or browser settings; on shared devices we recommend using the session without a persistent copy. Unsaved entries may be lost when the tab is closed.

You initiate copying, sharing and opening another app. Review the selected text before sharing it. Pasting or sharing into an AI, email or messaging service is subject to that service’s rules. Deleting information in the Compass does not remove those copies or downloaded files. The Compass does not send applications or result emails. Account functions are tested separately with an invited group, with notices shown before sign-in.

01

Controller

This privacy policy explains how personal data is processed in connection with this website. It is written with GDPR-oriented principles in mind and should be reviewed against the operator's actual hosting and legal setup before launch.

Karl Philipp Nolte

Email: hello@wateristheholygrail.com

Ostpreußenstr. 48, 45259 Essen, Germany

02

Hosting and Server Logs

This website is technically delivered via Vercel Inc.. When the website is accessed, technically necessary server log data may be processed, such as IP address, timestamp, requested resource, browser information, and referrer. This processing serves website delivery, stability, and security.

The legal basis is generally Art. 6(1)(f) GDPR insofar as processing is required for secure and functional website delivery.

03

Signup and EPUB Delivery

For requested EPUB access, your email address, language and form source are processed to send a confirmation link through Brevo. You may separately subscribe to updates about an interest you choose. This option is voluntary and unchecked by default. Without it, this process does not add your address to a newsletter list.

Optional newsletter signup is based on your consent under Art. 6(1)(a) GDPR and takes effect after active confirmation. Brevo records your chosen interest, language, form source, request and confirmation times, and the version of the consent wording. Every newsletter must include an unsubscribe link; you may also contact the address above.

For delivery integrity, structured server-side events are also logged for signup submission, confirmation, and download handoff. These logs serve functional verification, error diagnosis, and abuse detection rather than optional marketing analytics about general browsing behavior.

04

Contact Form

If you use the contact form, the data you enter is processed: first name, last name, email address, optional phone number, subject, and message. The submission is validated server-side, and an IP-based rate limit plus simple anti-spam form checks with short-lived in-memory storage are used for abuse protection.

Your inquiry is sent through Brevo to Karl Philipp Nolte's designated inbox. The form reports success only after Brevo accepts that message for sending, then attempts an acknowledgement to you. The inquiry does not create a marketing contact or subscribe you to updates. Depending on the inquiry, the legal basis is Art. 6(1)(b) GDPR for pre-contractual or project-related requests, or Art. 6(1)(f) GDPR for other communication and abuse prevention.

05

Storage Duration

Contact inquiries are retained for as long as necessary to handle the request, any follow-up communication, and legitimate record-keeping needs. Join-signup data remains stored until you unsubscribe or the purpose no longer applies.

06

External Links and Platforms

This website contains links to external platforms such as Amazon, GitHub, and LinkedIn. When you follow those links, you leave this website. The privacy and content practices of those third parties are governed exclusively by their own notices and policies.

07

Analytics and Cookies

After successful email confirmation, the website sets a cookie used for EPUB access for up to 48 hours. It contains no email address, but an encrypted language, chosen interest, signup status and expiry. Confirmation links also expire after 48 hours. Both forms use short-lived abuse protection; it is not a durable limit shared across all servers.

At the time of this version, no optional web analytics is enabled. This privacy-first default reduces compliance risk under GDPR/ePrivacy standards. If analytics or marketing tools are introduced later, legal basis, consent mechanism, and this policy must be updated before deployment.

08

Data Subject Rights

Subject to the applicable legal requirements, you may have rights of access, rectification, erasure, restriction of processing, data portability, and objection to certain processing activities. You may also have the right to lodge a complaint with a supervisory authority.

09

Updates to This Policy

This privacy policy may be updated if the site content, technical infrastructure, legal basis, or third-party services change. The version published on this website is authoritative.