Privacy Policy
This policy explains how we process your personal data under the EU General Data Protection Regulation (GDPR). Scorelight is in waitlist mode: the only personal data we actively process is your email address, so we can send you one launch notification.
1. Controller
Ramon Melchior, RM Webdesign & AI
Auf dem Römer 8, 55765 Birkenfeld, Germany
Email: hello@scorelight.app
Full legal details are in the Imprint.
2. What we process, why, and on what legal basis
Waitlist sign-up
When you enter your email address, we send it to our email provider (Resend, see section 4) to store it and to send you a confirmation and, later, a single notification when Scorelight launches. We also receive an internal notification of the sign-up. Legal basis: your consent (Art. 6 (1) (a) GDPR), given by submitting the form. You can withdraw it at any time using the unsubscribe link in every email or by writing to us.
Website hosting and server logs
The site is hosted by Vercel. To deliver pages and protect the service, Vercel processes technical data such as your IP address, browser type and the pages requested. Your IP address is also used to rate-limit the sign-up form. Legal basis: our legitimate interest in operating a secure website (Art. 6 (1) (f) GDPR).
Contacting us by email
If you email us, we process your address and message to answer you. Legal basis: Art. 6 (1) (b) or (f) GDPR.
3. Cookies and analytics
This website sets no cookies and uses no analytics or tracking scripts. If you reach the site
through a campaign link, the ref and utm_* parameters in that link are
sent along with a sign-up so we can see which channel it came from. Nothing is stored on your
device, and the parameters are not linked to anything beyond that one sign-up.
4. Recipients and processors
- Resend, Inc. (USA): email delivery and waitlist storage. Data processing agreement in place; transfers under the EU-U.S. Data Privacy Framework and standard contractual clauses.
- Vercel Inc. (USA): hosting, content delivery and security. Data processing agreement in place; transfers under the EU-U.S. Data Privacy Framework and standard contractual clauses.
- Polar Software Inc. (USA): payment processing and merchant of record, once Scorelight is for sale. Polar receives the data needed to complete a purchase and issue an invoice. Legal basis: performance of a contract (Art. 6 (1) (b) GDPR).
5. Retention
Your waitlist address is kept until Scorelight launches and the notification has been sent, or until you unsubscribe, whichever comes first. Server logs are held by Vercel for a short period for security purposes. Purchase and invoice records are kept by Polar for as long as German tax law requires.
6. Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. Write to the address above.
7. Right to lodge a complaint
You can complain to a data protection supervisory authority, for example the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz.
Last updated: September 2026.