GDPR and hosting in Germany

TeamRally Cards is hosted in Germany and run from Hamburg under the EU General Data Protection Regulation (GDPR). This page is the short version. The Privacy Policy is the full one.

Where the data lives

  • Servers and database: Germany. The site, the API and the database that holds cards, messages and email addresses run on Hetzner servers in Germany.
  • Uploaded images and card files: EU. They are stored in Cloudflare R2 with EU data location.
  • Analytics: our own server. Umami, self-hosted and cookie-free. No cross-site tracking and no advertising profiles.

A few providers help run the service: email delivery, error reports, GIF search, and Google if you choose to sign in with Google. Each sees only what it needs and is bound by a data processing agreement. All of them are listed in the Privacy Policy.

What we hold, and for how long

  • Little to begin with. The person who creates a card gives an email address. Signers and guests need no account: they sign or reply from their own email invite. There are no passwords; sign-in is a six-digit code.
  • Cards are deleted. A delivered card and its messages are deleted about thirteen months after delivery, or sooner if you ask.
  • Sensitive invitation answers go sooner. Dietary and accessibility needs are shared only after the guest ticks a consent box, only the host sees them, and they are deleted 30 days after the event.

What we don't do

  • No ads, anywhere, including on the card your recipient opens.
  • We don't sell personal data or share it with ad networks.
  • We don't use your messages to train AI.
  • No tracking cookies, so there is no cookie banner.

Your rights

You can ask for access to your data, a copy of it, its correction or its deletion, and you can object to how it is used. Write to hello@teamrally.app and we'll act on it. You can also complain to a data protection authority. Ours is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI), and your own local authority is equally open to you.

Who is responsible

The controller is Deepu Jaxon, trading as TeamRally, in Hamburg, Germany. Full contact details are in the Impressum.