The controller responsible for data processing on this website is:
Marius Weltz
Weingartshofer Str. 23/1
88214 Ravensburg
Germany
contact(at)peanut-better-jam.de
(see also our Legal Notice)
This website ("Peanut-Better-Jam") is a web app for practicing bass/guitar. When you use it, the following personal data is processed:
Microphone audio data is not collected or stored (see section 5).
This website is hosted by Netlify, Inc. (512 2nd Street, San Francisco, CA 94107, USA). When you visit the site, Netlify automatically processes technical access data (e.g. IP address, browser type, time of access) in server log files. This serves the technical provision and security of the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functioning website).
More information: Netlify Privacy Policy. Netlify may transfer data to the USA; appropriate safeguards are in place (Standard Contractual Clauses).
We use Supabase, Inc. as a processor for account sign-in. You can sign in either via a one-time magic link sent to your email, or by setting a password for your account. Regardless of the method you choose, the following is processed:
If you choose to sign in with a password, the following is additionally processed:
If you use the magic-link method, no password is created or stored for your account — you receive a one-time login link by email each time you sign in instead.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract / pre-contractual measures).
More information: Supabase Privacy Policy. Supabase may process data outside the EU; appropriate safeguards are in place (Standard Contractual Clauses).
When you access the trainer app while logged in with an active subscription, the delivered copy contains a subscriber-specific identifier derived from your account email address. This identifier is embedded solely to trace unauthorized copying or redistribution of the app back to the account of origin, and to protect our service from unauthorized use.
It is processed only on our infrastructure (Netlify) at the moment the app is delivered to you, is not used for tracking your behavior within the app, and is not shared with third parties except where necessary to enforce our Terms of Service or as required by law.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting the service from unauthorized copying and redistribution).
To understand how the app is used over time and to occasionally ask for your feedback, we store, linked to your account email address:
Based on this, after you've used the app for a while (a certain number of sessions or a certain number of days), we may show you an optional, dismissible in-app prompt asking for feedback. If you submit feedback, the message you write is stored together with your email address, so we can follow up if needed. Submitting feedback is entirely optional — declining or ignoring the prompt has no effect on your access to the app.
The feedback form includes a separate, unchecked checkbox asking whether we may quote your feedback publicly as a testimonial (e.g. on our landing page). If you check this box, we may publish the text you wrote — anonymously, without your name or email address. This only happens if you actively check the box; leaving it unchecked means your feedback is used only internally as described above. You can withdraw this specific consent at any time by contacting us, and we will remove any published quote.
This data is processed by Supabase (see section 4 above for details on Supabase as a processor).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding and improving the service) for the usage data and feedback storage described above. Public use of a quote as a testimonial is based on Art. 6(1)(a) GDPR (your explicit, separate consent via the checkbox), which you may withdraw at any time with future effect.
To actually deliver account-related emails sent by Supabase — magic-link login emails, and, if you use password sign-in, account and password-reset emails — we use Resend, Inc. as an email delivery processor. This involves processing:
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) — sending you these emails is required for you to be able to use and manage access to the service.
More information: Resend Privacy Policy. Resend may process data outside the EU; appropriate safeguards are in place (Standard Contractual Clauses).
If you contact us at contact(at)peanut-better-jam.de, the message is forwarded to our inbox using ImprovMX as an email forwarding processor. This involves processing:
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in receiving and responding to inquiries) or Art. 6(1)(b) GDPR where your message relates to an existing or prospective contract.
More information: ImprovMX Privacy Policy.
The app offers an optional pitch-detection feature that uses your microphone. Importantly:
We use Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) to process payments. When you make a purchase, the data required for payment processing (e.g. payment information, billing address) is transmitted directly to Stripe. We do not receive or store full payment/card details ourselves — only the status of your subscription.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
More information: Stripe Privacy Policy.
With your consent, we use Google Analytics (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies to help us understand how visitors use this website (e.g. pages visited, referrer, approximate location, device/browser type). This data may be processed by Google on servers in the United States.
The legal basis for this processing is your consent (Art. 6(1)(a) GDPR), given via the cookie banner shown on your first visit. You can withdraw your consent at any time via the "Cookie settings" link in the footer, which stops future data collection.
We have entered into a data processing agreement with Google (Google Ads Data Processing Terms). IP addresses are anonymized by Google Analytics before storage, and we have configured Google Analytics to redact certain URL parameters (e.g. login and promotional codes) so they are never transmitted to Google.
More information: Google Privacy Policy. You can also install the Google Analytics Opt-out Browser Add-on to prevent data collection across all websites.
This website uses one technically necessary cookie for sign-in: it stores your login session so the app recognizes you as logged in and can verify your subscription status when you request a page. This cookie is strictly necessary to provide the login functionality you explicitly request by signing in (§ 25(2) No. 2 TDDDG, the German Telecommunications-Digital-Services-Data-Protection Act, formerly TTDSG) and therefore does not require separate consent. It is not used for tracking, analytics, or marketing, and is not shared with third parties.
With your separate consent (see section 10 above), we additionally use a Google Analytics cookie to understand site usage. This cookie is only set after you actively accept it via the cookie banner; if you decline or take no action, it is not set. You can change your decision at any time via the "Cookie settings" link in the footer.
Personal data is stored for as long as your account exists, or as required to perform our contract with you. After your account is deleted, associated data is deleted as well, unless legal retention obligations apply (e.g. tax-related retention of payment records). Google Analytics data is retained for 2 months, after which it is automatically deleted.
Under applicable law, you have the right at any time to:
Simply contact us at: contact(at)peanut-better-jam.de. You also have the right to lodge a complaint with a data protection supervisory authority.
This privacy policy will be updated as needed, in particular when new features are added. The version published on this page at any given time applies.