Privacy Policy

This policy explains how personal data is processed when you use our website (www.apartment-planner.com) and web app (app.apartment-planner.com), together “Apartment Planner”. The legally binding version is the German Datenschutzerklärung; this English text is provided for convenience.

1. Controller

The controller under the GDPR is:

A data protection officer is not legally required and has not been appointed (processing by a single individual, below the § 38 BDSG threshold).

2. Hosting

We host the website, app and backend with Cloudflare (Cloudflare, Inc., USA) using Pages, Workers, D1 (database), R2 (object storage) and Durable Objects. When you access the service, technically necessary data your browser transmits is processed — in particular your IP address, date/time, requested resource, referrer and user agent (server logs) — to provide the service securely and reliably. Legal basis: our legitimate interest in secure provision (Art. 6(1)(f) GDPR) and, where a usage contract exists, Art. 6(1)(b) GDPR. A data processing agreement (Art. 28 GDPR) is in place. See section 9 on transfers to the USA.

3. Cookies and local storage

We only set non-essential cookies or similar technologies after you have consented (§ 25(1) TDDDG). Strictly necessary storage does not require consent (§ 25(2) TDDDG):

4. Analytics with PostHog

To improve the product we use PostHog, EU-hosted (Frankfurt/EU data centre), in two tiers:

• Anonymous baseline (no consent): by default PostHog runs in “cookieless” mode. It sets no cookies and stores/reads nothing on your device; a daily-rotating, non-reversible server-side hash of IP, user agent and domain is used to count page views roughly. As nothing is stored on your device, § 25 TDDDG does not apply; the legal basis is our legitimate interest in data-minimising analytics (Art. 6(1)(f) GDPR).
• Extended analytics (consent only): only if you agree via our cookie notice does PostHog use cookies/localStorage and, where applicable, link events to your user ID. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with future effect (via “Privacy & cookies” in the app or “Privacy settings” in the website footer).

We capture, for example, page views and interaction events (such as which tools are used) and technical project metrics (wall/placement/variant counts). The content of your floor plans is not sent to PostHog; share and invite tokens are stripped from URLs before transmission. A data processing agreement (Art. 28 GDPR) is in place.

5. Account and authentication (Clerk)

For optional sign-in we use Clerk (Clerk, Inc., USA). When you sign in, Clerk processes your account data on our behalf — depending on the sign-in method, in particular your email address, first and last name, profile picture, a user ID and session information. Legal basis: performance of the usage contract (Art. 6(1)(b) GDPR). You can use the editor locally without signing in. A data processing agreement (Art. 28 GDPR) is in place. See section 9 on transfers to the USA.

6. Saved projects, sharing and collaboration

When signed in, we store your projects in the cloud (Cloudflare D1/R2) so they are available across devices. This includes the floor-plan documents, optional preview images and — if you upload one — background/blueprint images that may show the actual floor plan or photos of your home. For shares and invites we additionally store the participating user IDs, share tokens and their usage counters. During real-time collaboration, presence data (name, avatar, cursor/selection position) is transmitted between participants temporarily. Legal basis: Art. 6(1)(b) GDPR. You can delete stored projects at any time in the app; deleted projects are removed together with their images and shares.

7. Feedback and contact

If you contact us via the feedback feature or by email, we process your information to handle your request (Art. 6(1)(f) GDPR; for contract-related requests Art. 6(1)(b) GDPR).

8. Recipients / processors

Real-time collaboration is operated by us (on Cloudflare); no additional third-party service is used.

9. Transfers to third countries (USA)

Cloudflare and Clerk are US companies and may process data in the USA. These providers are certified under the EU-US Data Privacy Framework; in addition we rely on the EU Commission's Standard Contractual Clauses (Art. 46 GDPR). PostHog processes data in the EU (Frankfurt). Despite these safeguards, a level of protection fully equivalent to the EU cannot be guaranteed in third countries.

10. Retention

We keep personal data only as long as necessary for the stated purposes or required by law. Account data exists until the account is deleted; stored projects until you delete them; server logs are kept only as long as necessary for secure operation, in line with our hosting provider's policies.

11. Your rights

Under the GDPR you have the right to:

• access (Art. 15), rectification (Art. 16) and erasure (Art. 17),
• restriction (Art. 18) and data portability (Art. 20),
• object to processing based on legitimate interests (Art. 21), and
• withdraw consent at any time with future effect (Art. 7(3)).

To exercise these, an email to hello@apartment-planner.com suffices.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Competent authority, among others: Berliner Beauftragte für Datenschutz und Informationsfreiheit (https://www.datenschutz-berlin.de).

13. Changes to this policy

We update this policy when our processing changes. The version published on this page applies.

Last updated: 20.07.2026