PatternLift is operated by a German company, so this page carries both the legal notice required under German law and our privacy policy. Both are set out in full below.
Last updated 20 August 2026
German law requires every commercial website operator established in Germany to publish the following information, regardless of where its visitors are located or which language the site is written in.
Lukas Kubich and Martin Härtel, at the address above.
The European Commission provides a platform for online dispute resolution at ec.europa.eu/consumers/odr. We are neither obliged nor willing to participate in dispute resolution proceedings before a consumer arbitration board.
Our site contains links to external websites over whose content we have no control. We accept no liability for that content. The respective provider or operator of the linked pages is always responsible for their content.
We are a German company, so the EU General Data Protection Regulation applies to everything we do with personal data, including data belonging to people outside the EU. This policy explains what we collect, why, who else sees it, and what you can demand from us.
The controller for the processing described here is PatternLift UG (haftungsbeschränkt), Industriestraße 19, 48308 Senden, Germany. You can reach us at hello@patternlift.com. We are not required to appoint a Data Protection Officer and have not appointed one.
When you open a page, your browser sends technical information that our hosting provider records in server logs: your IP address, the page requested, the date and time, the referring page, and your browser and operating system. This is used to deliver the site and keep it secure. The legal basis is our legitimate interest in operating a functioning, secure website under Art. 6(1)(f) GDPR. Logs are retained for a short period and then deleted or anonymised.
We do not use cookies on this website and we do not run analytics or tracking scripts. Nothing is stored in your browser beyond what is needed to display the page.
The tool on our homepage that analyses a caption you paste runs entirely inside your browser. The text you paste is never transmitted to us, never stored, and never associated with you. We do not receive it and cannot see it.
When you submit your email address, we store that address so we can contact you about access. We use double opt-in: we send you a confirmation email and only add you to the list once you click the link in it. That step exists to prove you actually consented.
We store the following:
The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw that consent at any time, with effect for the future, by clicking unsubscribe in any email we send or writing to us. Withdrawing does not affect the lawfulness of what we did before you withdrew. We keep your data until you withdraw or ask us to delete it, and we delete unconfirmed signups after 30 days.
We send you a confirmation email, and after you confirm, occasional emails about launch progress and access. Every email contains a one-click unsubscribe link and our postal address. We do not sell, rent or share your address with anyone for their own marketing.
We advertise on Meta platforms and we want to know which advertisement brought someone here. That happens in two separate ways, on two different legal bases, and you can decline either one.
Cookies on your device. If you accept the banner, we load Meta's measurement script, which stores identifiers on your device (_fbp, and _fbc if you arrived from an advertisement). Nothing is stored unless you accept. The legal basis is your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR, and your choice is recorded in a first-party cookie named pl_consent which holds only the word granted or denied.
Measurement from our server. Separately, and whether or not you accept cookies, our server reports to Meta that a page was viewed, that a waitlist signup happened, and that an email address was confirmed. This stores nothing on your device, so § 25 TDDDG does not apply to it. It sends your email address in hashed form, meaning it is converted into an irreversible string before it leaves us, together with your IP address, your browser's user agent, and the advertisement click identifier from the link you followed, if there was one.
The legal basis for that is our legitimate interest in knowing whether the advertising we pay for works, under Art. 6(1)(f) GDPR. We have weighed that against your interests: the data is limited, your address is hashed rather than sent in the clear, none of it is used to build a profile of you by us, and no decision affecting you is made from it.
You can object to server-side measurement at any time under Art. 21(1) GDPR. Choosing No thanks on the banner is treated as an objection and stops it, and you may also object by writing to hello@patternlift.com. We will stop and confirm that we have.
Meta Platforms Ireland Ltd. acts as an independent controller for the data it receives, and transfers data to the United States. What Meta does with it is governed by their own data policy, not ours.
We use a small number of service providers who process data on our instructions under a data processing agreement pursuant to Art. 28 GDPR. Some are established in the United States. Where data is transferred outside the EU, we rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Website hosting and delivery, server logs | United States |
| Supabase | Database storing waitlist entries and answers | European Union (Frankfurt) |
| Resend | Sending confirmation and update emails | United States |
| Cloudflare | Bot protection on the signup form (no cookies set) | Global |
| Meta Platforms Ireland | Advertising measurement, only with consent | Ireland and United States |
Waitlist entries are kept until you withdraw consent or ask for deletion. Unconfirmed signups are deleted after 30 days. Server logs are kept for a short retention period set by our hosting provider. Where German commercial or tax law requires us to retain a record for longer, we restrict processing of that record instead of deleting it, and delete it when the retention period ends.
Providing your email address is entirely voluntary. Nothing happens if you do not, other than that you will not hear from us. The three questions after signup are optional and you can skip them. We do not use automated decision-making or profiling that produces legal effects concerning you.
These are not courtesies. They are legal entitlements, and we will answer any of them within one month.
To exercise any of these, email hello@patternlift.com. We may ask you to confirm your identity before we act, to make sure we are not handing your data to someone else.
For anything on this page, including data requests, deletion, or a question about how we handle something, write to hello@patternlift.com or post to PatternLift UG (haftungsbeschränkt), Industriestraße 19, 48308 Senden, Germany.
If we materially change how we handle personal data, we will update this page and change the date at the top before the change takes effect.