Skip to content

Privacy

This site collects nothing, and neither do the tools.

Controller

Kai Kauper
Humboldtstr. 3
71032 Böblingen
Germany

hello@vantra.design(opens in a new tab)

The controller within the meaning of Art. 4(7) GDPR is the natural person named above. There is no obligation to appoint a data protection officer.

This website

Static pages, served without analytics, tracking pixels, advertising identifiers or third-party cookies. Fonts are self-hosted, so no request leaves for a font CDN. The site does not set any cookies and does not use any tracking technology.

Hosting

The site is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you visit a page, your browser automatically transmits certain technical data to Cloudflare's edge servers:

  • IP address
  • Date and time of the request
  • URL of the requested page
  • Referrer URL (the previously visited page)
  • Browser type, version and language
  • Operating system

This data is processed to deliver the page to you and to maintain operational security (protection against attacks). It is not used to profile visitors. The legal basis is Art. 6(1)(f) GDPR — the legitimate interest of providing a functional and secure website.

Cloudflare retains server logs for a limited period (typically up to 72 hours) and deletes them automatically thereafter. Cloudflare acts as a processor under a data processing agreement that includes the EU standard contractual clauses. Cloudflare is also certified under the EU–US Data Privacy Framework.

More information: Cloudflare Privacy Policy(opens in a new tab).

Encryption

This site uses TLS encryption (recognisable by the https:// prefix and the lock icon in your browser). When TLS is active, data transmitted between your browser and the server cannot be read by third parties.

The tools

Vantra's tools run locally in your browser. Page content, URLs, screenshots, source code and findings are not transmitted to us or to anyone else. There is no account and no telemetry.

Some tools store settings or progress in your browser's localStorage — for example, the maturity check stores your answers so you can resume later. This data never leaves your device and is not accessible to us. You can clear it at any time through your browser settings.

Contact via email

When you send an email to hello@vantra.design(opens in a new tab), we process your email address, your name (if provided) and the content of your message. Email is routed through Cloudflare Email Routing, a service of Cloudflare, Inc. (see Hosting above for address and transfer safeguards).

The legal basis is Art. 6(1)(f) GDPR — the legitimate interest in responding to enquiries — or Art. 6(1)(b) GDPR if the contact relates to a contractual matter. Your data is stored only as long as needed to handle the enquiry, plus any retention period required by law (typically up to six years under German commercial law).

Cookies and analytics

This site does not set cookies — not first-party, not third-party. There is no analytics service, no conversion tracking and no advertising network. Consequently, no consent banner is needed.

Third-country transfers

The only recipient of personal data outside the European Economic Area is Cloudflare, Inc. (USA), which hosts the site and routes email. The transfer is safeguarded by Cloudflare's certification under the EU–US Data Privacy Framework and by the EU standard contractual clauses included in the data processing agreement.

Your rights

Under the GDPR you have the following rights with respect to your personal data. To exercise any of them, contact hello@vantra.design(opens in a new tab).

  • Access (Art. 15) — confirmation of whether data is processed and, if so, a copy of it.
  • Rectification (Art. 16) — correction of inaccurate data without undue delay.
  • Erasure (Art. 17) — deletion of data when it is no longer needed, consent is withdrawn, or processing is unlawful.
  • Restriction (Art. 18) — temporary suspension of processing while accuracy or lawfulness is under review.
  • Data portability (Art. 20) — receipt of your data in a structured, machine-readable format.
  • Objection (Art. 21) — objection to processing based on legitimate interest. Processing will cease unless compelling legitimate grounds override your interests.

Supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority for the controller is:

Der Landesbeauftragte für den Datenschutz
und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
www.baden-wuerttemberg.datenschutz.de(opens in a new tab)

Automated decision-making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

If that changes

Should accounts or paid features be introduced, this page will state exactly what is stored, where, and for how long — before the feature ships, not after.