This policy explains what personal data we process when you use Chartive, why, and the rights you have under the GDPR.
The controller responsible for data processing on this website is:
WU Socialmedia GbR, Bonländer Hauptstraße 34, 70794 Aichtal, Germany.
Email: info@wu-socialmedia.de
Chartive is hosted on Vercel (Vercel Inc., USA). Our database and uploaded files are stored with Neon (Postgres, EU region) and Vercel Blob. These providers process data on our behalf as processors under Art. 28 GDPR. Where data is transferred to the USA, it is safeguarded by the EU Standard Contractual Clauses. When you visit the site, the infrastructure automatically processes technical data (such as IP address, request time, and user agent) to deliver the pages and maintain security. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in a secure, functioning service).
If you create an account, we process your email address and display name to operate your account and attribute your submissions. Authentication is handled via Neon Auth (Managed Better Auth), which sets strictly necessary session cookies to keep you signed in. If you sign in with Google, Google transmits your email address and name to us; Google's own privacy policy applies to that sign-in. Legal basis: Art. 6 (1)(b) GDPR (performance of a contract) and, for staying signed in, Art. 6 (1)(f) GDPR.
When you submit a visualization, create a creator profile, comment, or like content, we store what you provide (including images, text, sources, and any website or social links). Published submissions and creator profiles are public. Legal basis: Art. 6 (1)(b) GDPR. Comments are reviewed before publication for moderation (Art. 6 (1)(f) GDPR).
We use privacy-friendly, first-party analytics to understand how the site is used. Our own event log stores coarse data such as the event type, the page, a salted and rotating session identifier, and the referring website's host — it does not store your IP address and does not build cross-site profiles. We also use Vercel Analytics and Speed Insights, which measure aggregate traffic and performance without cookies. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in improving the service).
If you subscribe to our newsletter, we process your email address using a double opt-in procedure and only send you the newsletter you requested. You can unsubscribe at any time. Legal basis: Art. 6 (1)(a) GDPR (consent).
We use only strictly necessary cookies — primarily the authentication session cookie when you are signed in. We do not use advertising or cross-site tracking cookies.
We keep personal data only as long as necessary for the purposes above or as required by law. Account and content data are kept while your account exists; you can request deletion at any time (published contributions may be anonymised rather than removed where there is a legitimate interest in keeping the content available).
Under the GDPR you have the right to:
To exercise these rights, contact us at info@wu-socialmedia.de. You also have the right to lodge a complaint with a supervisory authority — for our registered seat, the competent authority is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.
Last updated: August 14, 2026