Privacy policy

Information about the processing of personal data under Art. 13 GDPR.

Stand: April 2026 — draft. Have counsel review before launch and conclude DPAs with all processors listed below.

1. Controller

Radiant Life UG (haftungsbeschränkt), represented by managing director Jean-Marc Seidl. Postal address: Uneringer Str. 1, 82229 Seefeld, Germany. Contact: info@radiantlife.de.

2. Data we process

When you visit the site

Server logs (salted IP hash, user agent, requested URL, referrer, timestamp) for security and stability analysis. Legal basis: Art. 6 (1) (f) GDPR. Retention: max. 14 days.

When you use the finder (no login)

Your answers (modality, use case, context) and a SHA-256 hash of your IP for rate limiting. Stored anonymously in a “decision_session” row. Legal basis: Art. 6 (1) (b) GDPR.

When you have an account

Email (mandatory), name (optional), OAuth profile picture (optional), language, newsletter status, subscription plan, Stripe customer ID. Legal basis: Art. 6 (1) (b) GDPR.

When you make a purchase

Stripe processes your payment data as an independent controller. We only receive customer ID, payment intent ID, status, amount. Legal basis: Art. 6 (1) (b) GDPR.

3. Processors and third-country transfers

Same processors as listed in the German version. DPAs in place for all of them; SCCs where applicable for US transfers.

4. Cookies

Strictly necessary cookies only (session + auth). Plausible is cookieless. Stripe Checkout sets cookies during payment flow.

5. Your rights

Access, rectification, erasure, restriction, portability, objection, complaint to a supervisory authority. Self-service export and account deletion in the dashboard under “Account”.

6. Retention periods

Logs 14 days · decision sessions 90 days (anonymous) · account data until deletion · invoices/Stripe data 10 years (§ 147 AO) · PDF reports 30 days · audit logs 24 months.

7. Newsletter

Double opt-in via Resend Audiences. Unsubscribe any time via the link in every email or by emailing info@radiantlife.de.