Privacy policy
Datenschutzerklärung
Last updated: 5 October 2026
1. Controller
The controller for the processing of your personal data is Impact84 UG (haftungsbeschränkt), Kinzigstraße 41, 10247 Berlin, Germany. You can reach us at support@brandaddy.app or through the contact form.
2. Data we process
When you open the website. Our hosting providers process your IP address and the technical data of each request. We use the IP address to limit the number of free checks and contact messages from one address. Legal basis: Art. 6(1)(f) GDPR, our interest in a stable service that is protected against abuse.
When you check a name. We store the name, the category you select and the report. To make the report, we send the name to app store search, domain registries (RDAP) and the social platforms check. A name is usually not personal data. If you are signed in, the report is linked to your account. Legal basis: Art. 6(1)(b) GDPR.
When you sign in. Sign-in uses your Google account through Clerk. We store your email address, an account id and your credit balance and history. Legal basis: Art. 6(1)(b) GDPR.
When you pay. Stripe processes the payment. We receive the result and the pack you bought. We do not receive your card number. Legal basis: Art. 6(1)(b) and (c) GDPR. Tax law requires us to keep invoices for the legal retention period.
When you set a monitor. We repeat the check each day and send notices to the email address of your account. Legal basis: Art. 6(1)(b) GDPR.
When you use the contact form. We process your name, email address and message to answer you. The message goes to our internal support channel and is not stored in the product database. Legal basis: Art. 6(1)(b) or (f) GDPR.
3. Cookies and browser storage
We use no analytics and no advertising cookies. Clerk sets the cookies that are necessary to keep you signed in. Stripe sets its own cookies on its payment page.
Your browser stores two items on your device: your light or dark theme, and the list of your recent checks (“Recent”). These items stay in your browser and are not sent to us. You can remove the list with “Forget these”.
4. Recipients
We use these providers as processors or independent controllers:
| Provider | Purpose | Data |
|---|---|---|
| Clerk | Sign-in and session | Email address, Google account id, session cookie |
| Stripe | Payment | Payment data, email address, purchase |
| Vercel | Hosting of the website | IP address, requests |
| Railway | Hosting of the service | IP address, requests, the names you check |
| MongoDB Atlas | Database | Account, credit history, reports, monitors |
| Cloudflare R2 | File storage | Attorney packet files |
| Resend | Email delivery | Email address, monitoring notices |
| DataForSEO | App store search and search volume | The names you check |
| UnifAPI | Social handle check | The names you check |
| Anthropic | Name ideas | The name or description you enter |
Some of these providers process data in the United States. For these transfers we rely on the EU-US Data Privacy Framework or on the standard contractual clauses of the European Commission.
5. Share links
If you make a share link for a report, each person who has the link can read the report until the link expires after 24 hours.
6. Storage period
We keep your account, your credit history and your reports until you ask us to delete them. We keep invoice data for the period that tax law requires. To delete your account, write to support@brandaddy.app.
7. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing that is based on Art. 6(1)(f) GDPR.
You can also complain to a supervisory authority. The authority for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.