Privacy Policy

This Privacy Policy applies to the website housebober.com. A separate Privacy Policy applies to the House Bober mobile app.

1. Data Controller

The data controller responsible under the General Data Protection Regulation (GDPR) and other applicable data protection laws is:

2. General Information on Data Processing

We process personal data of our users only to the extent necessary for providing a functional website and our content and services. Personal data is generally processed only after the user's consent or in cases where prior consent cannot be obtained for factual reasons and the processing is permitted by law.

3. SSL / TLS Encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.

4. Server Log Files

When you access our website, our hosting providers automatically collect information transmitted by your browser and store it in so-called server log files. These include:

• IP address
• Date and time of the request
• URL of the page accessed
• Referrer URL
• Browser type and version
• Operating system used

These data are not merged with other data sources. Collection is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of the website — for this purpose, server log files must be recorded.

The data are automatically deleted once the storage purpose ceases to apply (typically after no more than 14 days).

5. Hosting (Vercel)

Our website is hosted by:

Vercel processes technically necessary data when the website is accessed (in particular IP address, timestamp, requested URL, browser type). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the reliable provision of the website).

A Data Processing Addendum (DPA) under Art. 28 GDPR is in place with Vercel, available at https://vercel.com/legal/dpa.

Since Vercel may transfer data to the USA, this transfer is based on the EU-US Data Privacy Framework. Vercel is certified under the EU-US Data Privacy Framework.

6. CDN and DNS (Cloudflare)

For website delivery we use services from:

Cloudflare acts as a Content Delivery Network (CDN) and DNS provider, and provides email routing. When the website is accessed, Cloudflare processes in particular the IP address, request timestamp, and browser information to secure and deliver traffic. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the security, availability, and performance of the website).

A Data Processing Addendum under Art. 28 GDPR is in place with Cloudflare, available at https://www.cloudflare.com/cloudflare-customer-dpa/. Cloudflare is certified under the EU-US Data Privacy Framework.

7. Email Contact

If you contact us by email at support@housebober.com, your details (in particular email address, name, content of the message) will be stored for the purpose of processing your request and for any follow-up questions.

Incoming email is routed via Cloudflare Email Routing to a private mailbox. The legal basis is Art. 6(1)(b) GDPR for inquiries related to a contract, or Art. 6(1)(f) GDPR for other inquiries (legitimate interest in handling inquiries properly).

Data transmitted to us by email is deleted as soon as it is no longer needed, at the latest after the expiry of statutory retention periods.

8. Contact / Support Form

On our /support page we provide a contact form. When you submit the form, we process the data you enter — in particular your email address and the content of your message — together with technical data required to transmit and protect the form (in particular your IP address and a timestamp).

The purpose is to receive, process and respond to your inquiry. The legal basis is Art. 6(1)(b) GDPR where your request relates to a (pre-)contractual matter, otherwise Art. 6(1)(f) GDPR (our legitimate interest in handling inquiries and in operating a secure, spam-free form). Providing the data is voluntary, but we need your email address in order to reply.

We delete the data once it is no longer required, at the latest after the expiry of any statutory retention periods. The message reaches us by email and is then handled as described in the “Email Contact” section above.

Email delivery (Resend)

To deliver messages submitted through the form to our mailbox, we use the email service:

Resend processes the data contained in the form (your email address, the message content and technical metadata such as your IP address) on our behalf and solely for the purpose of sending the email. A data processing agreement pursuant to Art. 28 GDPR is in place, available at https://resend.com/legal/dpa. As data may be processed in the USA, the transfer is safeguarded by the EU-US Data Privacy Framework — under which Resend is certified — and by the Standard Contractual Clauses included in that agreement.

Spam protection (Cloudflare Turnstile)

To protect the form against automated abuse (spam and bots), we use Cloudflare Turnstile, a service of Cloudflare, Inc. (see the “CDN and DNS” section above for the provider’s details and the data processing agreement). When you use the form, Turnstile processes technical signals — in particular your IP address, information about your browser and device (e.g. user agent) and interaction data — in order to tell human visitors apart from bots.

Turnstile is privacy-preserving and works without cookies. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protecting our form and systems against misuse). Further information is available in Cloudflare’s Turnstile Privacy Policy: https://www.cloudflare.com/turnstile-privacy-policy/.

9. Web Analytics with Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies to analyse how the website is used. The data collected includes pages visited, clicks, approximate location (region/city, derived from a truncated IP address), device type, and the date and time of access.

We have enabled IP anonymisation; your IP address is truncated by Google within EU/EEA member states before transmission. Transfer to and processing on Google servers in the USA cannot be ruled out. Any such third-country transfers are based on the EU-US Data Privacy Framework and Standard Contractual Clauses.

Where enabled, we use the “Google Signals” feature. This evaluates data from signed-in Google users who have consented to ad personalisation in order to produce anonymised, aggregated statistics on the demographic characteristics (age, gender) and interests of our visitors. We do not link this data to individual persons.

This processing is carried out solely on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Google Analytics is loaded only after you have given consent via our cookie banner. You may withdraw your consent at any time with effect for the future via the cookie settings.

We have limited data retention in Google Analytics to 14 months, after which user- and event-level data is automatically deleted. For more information on Google’s data processing, see Google’s privacy policy at policies.google.com/privacy.

10. Cookies and Consent

This website uses cookies and comparable technologies only where technically necessary or where you have consented. On your first visit, you will be asked for consent via a cookie banner. Non-essential cookies — in particular those for web analytics — are only set after your active consent. You can change or withdraw your selection at any time via the cookie settings.

11. Your Rights

With regard to your personal data, you have the following rights against us:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to object (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, please contact support@housebober.com. You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

12. Updates to this Privacy Policy

This Privacy Policy is currently valid. As our website evolves or legal/regulatory requirements change, we may need to update this Privacy Policy. The current version is always available on this page.

Last updated: 31 May 2026