Privacy Policy.

1. Controller

IP Strategy UG (haftungsbeschränkt), Niederrheinstraße 46f, 41472 Neuss, Germany — full details in the Impressum. Data protection contact: info@ipstrategy-group.de.

2. What we process, and why

Visiting the site

Our host, Vercel, processes technical request data including your IP address, user agent and the pages requested, in order to serve the site and keep it secure. Legal basis: legitimate interest, Art. 6(1)(f) GDPR.

Analytics — only if you agree

We use DataFast to understand which channels bring people to the ledger. The tracking script is not loaded until you accept the cookie banner. Decline, and it is never loaded and no analytics cookie is set. Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG, withdrawable at any time.

When enabled it records page views, referrer, campaign parameters, approximate location derived from IP, device and browser type, and the interaction goals we define on this site (for example, opening the bid form), and sets the cookies in section 3.

Placing a bid

To create your listing we process the house name, link and one-line description you enter, and the amount. To mint your crest we may also retrieve the emblem or logo your site publishes at the address you list. This data is published publicly on the ledger — that is the product. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.

Payment

Payments are handled by Dodo Payments as merchant of record. Your name, email, billing address and payment details are collected by Dodo directly — we never see or store card details. Dodo acts as an independent controller for the payment and applies its own privacy policy. We receive the payment confirmation, the amount, and your name and email in order to deliver your crest and to meet our record-keeping obligations. Legal basis: contract, Art. 6(1)(b), and legal obligation, Art. 6(1)(c) GDPR.

We also attach your checkout confirmations — your acceptance of the Terms and Refund Policy and your consent to immediate delivery, each with a timestamp — to the payment record held by Dodo Payments, as proof of those declarations. Legal basis: Art. 7(1) GDPR together with Art. 6(1)(c) and (f) GDPR.

Fulfilment

Your listing (house name, link, description), your payment reference and amount, your email address, and your minted crest image are stored in our database and file storage, operated by Supabase and hosted in Frankfurt, Germany (EU). The crest image itself is publicly accessible by design — it is made to be shared. Your crest is delivered by email through Resend, which processes your email address and the message for that purpose. Your email address is also used to send your order confirmation and the contractual Tribute reminder ahead of each anniversary. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.

Contacting us

If you write to us — by email or through the contact form on the Impressum — we process your name, your email address and the content of your message in order to answer it. Form messages are relayed to our inbox by Resend; nothing is stored on the website itself. Legal basis: performance of a contract or pre-contractual steps, Art. 6(1)(b) GDPR, otherwise our legitimate interest in answering inquiries, Art. 6(1)(f) GDPR.

Your consent choice

Your accept-or-decline is stored in your browser's localStorage under elite_club_consent. It never leaves your device and exists so a refusal is honoured on your next visit.

Fonts are self-hosted on this domain. No font CDN, and no Google service, sees your visit.

3. Cookies and similar storage

Lifetimes are set by the DataFast script and may change with its versions; the listing here reflects the script as deployed on this site.

You can change your mind whenever you like: reopen the cookie choice. Declining after previously accepting also deletes the DataFast cookies listed above.

4. Who receives your data

The ledger database is hosted in the EU. Vercel, DataFast, Resend and Dodo Payments may process data outside the EU/EEA; where they do, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision (EU–US Data Privacy Framework), per each provider's data processing agreement. A copy of the safeguards that apply to your data can be requested at any time via info@ipstrategy-group.de.

5. How long we keep it

• Listing data — for as long as the listing runs, then up to 12 months after it lapses.
• Payment records — for the statutory retention period, which in Germany is up to ten years under tax and commercial law.
• Analytics — for as long as our DataFast account retains them; we review and prune analytics data at least annually.
• Contact messages — for as long as needed to handle the inquiry, at most 12 months after the exchange ends, unless a statutory retention duty applies.
• Server logs — for the short period set by Vercel's platform defaults.

6. Your rights

You have the right to access your data (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). Where processing rests on consent, you may withdraw it at any time with effect for the future.

Write to info@ipstrategy-group.de to exercise any of these.

You may also complain to a supervisory authority. The one responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

Listings are published deliberately while they run. A lapsed or erased listing is removed from the public board, and the publicly hosted copy of your crest is deleted at the latest 12 months after the listing lapses (or earlier on request) — the crest file emailed to you remains yours. Payment records we are legally required to retain (§ 147 AO, § 257 HGB) are kept regardless.