Privacy policy

Last updated: November 2026

1. Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is:

Milan Porzsolt
Mühlendamm 1, 10179 Berlin, Germany
Email: admin.vitaproof@gmail.com

2. Summary

• We only collect your email address, and only if you join the waitlist and give your consent.
• We do not use cookies, analytics or advertising trackers.
• We do not collect any health data on this website.
• We never sell your data.

3. Visiting the website

Hosting (Vercel)

This website is hosted by Vercel Inc., USA. When you open a page, your browser automatically sends technical data to the server: your IP address, date and time, the page requested, browser type and operating system. This data is needed to deliver the website securely and to protect it from attacks. It is stored in server logs for a short time and is not combined with other data.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, working website). We have a data processing agreement with Vercel. Where data is transferred to the USA, this is based on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses. More information: vercel.com/legal/privacy-policy.

Fonts (Bunny Fonts)

To display our typefaces, your browser loads font files from Bunny Fonts, a service of BunnyWay d.o.o., Ljubljana, Slovenia (EU). Your IP address is transmitted to the provider for this. According to the provider, no personal data is logged or stored. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a consistent appearance). More information: bunny.net/privacy.

Supplement check

The supplement check at /check runs entirely in your browser. Your answers, including any about pregnancy, medicines or diagnoses, are not sent to us or to anyone else and are not stored. They are gone when you close or reload the tab. To show results, the page loads our supplement database from our own server (Vercel, see above).

Pharmacy map (only after you click “Load map”)

The pharmacy finder at /pharmacies does not load any third-party content until you click “Load map”. After that click, your browser connects directly to these services:

• OpenStreetMap map tiles (tile.openstreetmap.org) and Nominatim place search (nominatim.openstreetmap.org), run by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. They receive your IP address, browser information, the map area you view and, if you use the search, the postcode or place you type. The UK has an EU adequacy decision. More information: osmfoundation.org/wiki/Privacy_Policy.
• Overpass API (overpass-api.de), operated by FOSSGIS e.V., Germany, which returns the pharmacy locations. It receives your IP address and the search point, rounded to about 100 metres. More information: fossgis.de.

If you click “Use my location”, your browser asks for permission first. Your exact location stays in your browser; only the rounded search point and the visible map area are sent to the services above. Vitaproof itself does not receive or store any of this.

Legal basis: your consent by clicking “Load map”, Art. 6(1)(a) GDPR, and for location your separate browser permission. You can withdraw by simply reloading the page; the map is then off again.

The buttons that lead to IhreApotheken.de or ApoScout are plain links. Nothing is sent to those services until you click one; after that, their own privacy policies apply.

4. Joining the waitlist

If you join the waitlist, we store:

• your email address,
• which form and language version you used,
• that you gave consent, and the date and time.

Purpose: to inform you by email when Vitaproof launches and, occasionally, about major progress of the project.

Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by sending a short email to admin.vitaproof@gmail.com. We will then delete your email address.

Storage period: until you withdraw your consent, or until the waitlist is no longer needed, whichever comes first.

Database provider: the waitlist is stored with Supabase Inc., USA, on servers in Frankfurt am Main, Germany (EU). Your browser sends the form data directly to Supabase, which also processes your IP address for this request. We have a data processing agreement with Supabase. Where data could be accessed from the USA, this is based on the EU Standard Contractual Clauses. More information: supabase.com/privacy.

5. Contact by email

If you email us, we use your email address and message only to answer your request. Legal basis: Art. 6(1)(b) or (f) GDPR. We delete the correspondence once it is no longer needed, unless legal retention periods apply.

6. Your rights

You have the right to:

• access the data we hold about you (Art. 15 GDPR),
• have incorrect data corrected (Art. 16),
• have your data deleted (Art. 17),
• restrict processing (Art. 18),
• receive your data in a portable format (Art. 20),
• object to processing based on legitimate interest (Art. 21),
• withdraw your consent at any time (Art. 7(3)).

To use these rights, just email admin.vitaproof@gmail.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), datenschutz-berlin.de.

7. Changes

We will update this privacy policy when the website or our services change, for example when the Vitaproof app launches. The current version is always available on this page.