Privacy Policy / Datenschutzerklärung

1. Controller / Verantwortlicher

2. Hosting, security and delivery

Vercel hosts and delivers the website. Technical request data such as IP address, timestamp, requested URL, device/browser information and security events can be processed to provide and protect the service. The legal basis is Art. 6(1)(f) GDPR (secure and reliable operation). Operational logs are retained only for the periods configured by the hosting provider or while needed to investigate an incident.

3. Generator, history, voting and sharing

When you generate content, the context you enter and the constructed prompt are sent to xAI to produce a response. Do not enter sensitive information about yourself or another person. Generated content, prompts, context, a pseudonymous browser identifier, votes and share events are stored in Convex so the generator, “Yours”, ranking and moderation features work. Approved submissions can appear in public lists.

Processing needed to provide the feature you request is based on Art. 6(1)(b) GDPR; service integrity and moderation are based on Art. 6(1)(f) GDPR. Records are kept while they support these purposes and are deleted or anonymized when no longer needed or following a valid deletion request, unless a legal retention duty applies.

4. Essential browser storage

ChadGPT stores a random userId value in an essential first-party cookie. It connects your browser to its generation history and interactions; it is not your name or email address. This storage is necessary to provide requested features under § 25(2) TDDDG and is processed under Art. 6(1)(b) GDPR. See the cookie notice for details.

5. Analytics, advertising and consent

Vercel Web Analytics provides aggregated, cookie-free usage measurement. With your permission, ChadGPT uses PostHog EU Cloud to measure page paths, generator modes and moods, generation outcomes and timings, votes, copies, shares, feedback/contact outcomes and outbound tip clicks. It also measures masked click and form-submit interactions, page engagement and scroll depth, collection and ad-slot visibility, web performance, dead/rage clicks, and technical errors. After consent, the Convex backend also confirms when a generation, vote or share was successfully saved. PostHog receives a pseudonymous analytics identifier and technical browser/device information, but ChadGPT does not send it generator prompts, generated content, feedback or contact messages, names, email addresses or contact details. Person profiles remain disabled. Session replay is enabled only after consent and masks all page text, form inputs and element attributes; ad frames and explicitly excluded areas are not recorded. Replay does not record request or response bodies, headers, canvas content, cross-origin frames or console logs. Analytics events are kept only while needed to evaluate product performance and longer-term trends, and are deleted or anonymized when they are no longer necessary or following a valid deletion request.

PostHog remains disabled until you select “Allow analytics”. The legal bases are your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can grant, decline or withdraw that permission at any time through “Analytics choices” in the footer. Withdrawal does not affect earlier lawful processing.

ChadGPT also uses Google Analytics and Google AdSense. Google Consent Mode denies analytics and advertising storage by default in the EEA, UK and Switzerland. Google's certified consent management platform collects your choices where its message is available. If no consent interface is shown, non-essential Google storage remains denied. The legal bases are your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw or change that consent using the privacy controls shown on the site. Withdrawal does not affect earlier lawful processing.

6. Contact and feedback

The contact form processes your topic, email address, optional name and message so we can answer you. The feedback dialog processes your feedback and optional contact details. Messages are delivered to access-restricted channels in the ChadGPT Discord workspace; Discord therefore processes the submitted information as a service provider. The legal basis is Art. 6(1)(b) GDPR for requests connected to a contract or pre-contractual steps and Art. 6(1)(f) GDPR for other enquiries and product feedback. Messages are normally deleted within six months after resolution unless they must be kept longer for a legal claim or retention duty.

7. Optional email choices

You can optionally provide your email address and separately choose (a) ChadGPT product updates and (b) promotions for other Alec Schneider Solutions products. Neither choice is required to use the site or app. The legal basis for each selected purpose is your consent under Art. 6(1)(a) GDPR.

Convex stores the normalized email address, the selected purposes, product and source, consent-copy version, locale, verification status, timestamps, and an audit history of grants and withdrawals. New records remain unverified. No marketing email is currently sent; double opt-in and a working unsubscribe process must be active before sending begins. Analytics receives only the form surface, selected purpose booleans, and a coarse result—not the email address or an email-derived identifier.

You can withdraw both choices at any time using “Withdraw all email consent” in the signup form or through the contact form. Withdrawal does not affect earlier lawful processing. A minimal suppression and consent record may be retained while needed to prove and honor your withdrawal; otherwise records are deleted when no longer needed or following a valid erasure request, unless a legal duty requires retention.

8. Recipients and international transfers

Relevant service providers are Vercel (hosting), Convex (database), xAI (AI generation), Discord (contact delivery), and—where you consent—PostHog (EU Cloud product analytics) and Google (analytics, advertising and consent management). Some providers may process data outside the EEA. Where required, transfers rely on an adequacy decision or appropriate safeguards such as standard contractual clauses. Provider privacy information is available from the respective provider.

9. Your rights

Subject to the legal requirements, you may request access, rectification, erasure, restriction, data portability, or object to processing based on legitimate interests. You may withdraw consent at any time. Use the contact form and select “Privacy request”, or email alec@a3.lol. We may need proportionate information to verify your identity.

You may also lodge a complaint with the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany, email mailbox@datenschutz-berlin.de, or another competent supervisory authority.

10. Children

ChadGPT is not directed to children under 16. Please do not submit personal data about children.