Skip to content

Explore

Privacy

Privacy Policy

This page explains in a calm, readable form which data is processed across the website, contact flow, and join flow, and where external service boundaries begin.

Controller

Karl Philipp Nolte

Contact

hello@wateristheholygrail.com

Brevo

Used for signup and contact delivery

01

Controller

This privacy policy explains how personal data is processed in connection with this website. It is written with GDPR-oriented principles in mind and should be reviewed against the operator's actual hosting and legal setup before launch.

Karl Philipp Nolte

Email: hello@wateristheholygrail.com

Ostpreußenstr. 48, 45259 Essen, Germany

02

Hosting and Server Logs

This website is technically delivered via Vercel Inc.. When the website is accessed, technically necessary server log data may be processed, such as IP address, timestamp, requested resource, browser information, and referrer. This processing serves website delivery, stability, and security.

The legal basis is generally Art. 6(1)(f) GDPR insofar as processing is required for secure and functional website delivery.

03

Signup and EPUB Delivery

For requested EPUB access, your email address, language and form source are processed to send a confirmation link through Brevo. You may separately subscribe to updates about an interest you choose. This option is voluntary and unchecked by default. Without it, this process does not add your address to a newsletter list.

Optional newsletter signup is based on your consent under Art. 6(1)(a) GDPR and takes effect after active confirmation. Brevo records your chosen interest, language, form source, request and confirmation times, and the version of the consent wording. Every newsletter must include an unsubscribe link; you may also contact the address above.

For delivery integrity, structured server-side events are also logged for signup submission, confirmation, and download handoff. These logs serve functional verification, error diagnosis, and abuse detection rather than optional marketing analytics about general browsing behavior.

04

Contact Form

If you use the contact form, the data you enter is processed: first name, last name, email address, optional phone number, subject, and message. The submission is validated server-side, and an IP-based rate limit plus simple anti-spam form checks with short-lived in-memory storage are used for abuse protection.

Your inquiry is sent through Brevo to Karl Philipp Nolte's designated inbox. The form reports success only after Brevo accepts that message for sending, then attempts an acknowledgement to you. The inquiry does not create a marketing contact or subscribe you to updates. Depending on the inquiry, the legal basis is Art. 6(1)(b) GDPR for pre-contractual or project-related requests, or Art. 6(1)(f) GDPR for other communication and abuse prevention.

05

Storage Duration

Contact inquiries are retained for as long as necessary to handle the request, any follow-up communication, and legitimate record-keeping needs. Join-signup data remains stored until you unsubscribe or the purpose no longer applies.

06

External Links and Platforms

This website contains links to external platforms such as Amazon, GitHub, and LinkedIn. When you follow those links, you leave this website. The privacy and content practices of those third parties are governed exclusively by their own notices and policies.

07

Analytics and Cookies

After successful email confirmation, the website sets a cookie used for EPUB access for up to 48 hours. It contains no email address, but an encrypted language, chosen interest, signup status and expiry. Confirmation links also expire after 48 hours. Both forms use short-lived abuse protection; it is not a durable limit shared across all servers.

At the time of this version, no optional web analytics is enabled. This privacy-first default reduces compliance risk under GDPR/ePrivacy standards. If analytics or marketing tools are introduced later, legal basis, consent mechanism, and this policy must be updated before deployment.

08

Data Subject Rights

Subject to the applicable legal requirements, you may have rights of access, rectification, erasure, restriction of processing, data portability, and objection to certain processing activities. You may also have the right to lodge a complaint with a supervisory authority.

09

Updates to This Policy

This privacy policy may be updated if the site content, technical infrastructure, legal basis, or third-party services change. The version published on this website is authoritative.