Privacy

Kevin Lenhart, 76756 Bellheim, Germany. info@theshortcutagency.de

Your entry. Display name, email address, amount, and the website link and logo you choose to submit. We need these to publish your entry and to contact you about it — Article 6(1)(b) GDPR, performance of a contract.

What is public. Only your display name, amount, logo and link. Your email address is never published and is not visible to other visitors or through our public API.

A spam signal. When you submit an entry we store a salted, one-way hash of your IP address and browser user agent. The raw IP address is not stored. This exists to stop flooding — Article 6(1)(f) GDPR, our legitimate interest in a working leaderboard.

Visitor counts. To show how many people are on the page and how often it has been viewed, we store a salted, one-way hash of your IP address and user agent together with a timestamp. The hash changes every day and the raw address is never stored, so it cannot be used to follow you over time or linked back to you. Records older than an hour are deleted automatically. View totals are counted in aggregate only — Article 6(1)(f) GDPR, our legitimate interest in showing accurate activity.

Payment. Card details are entered on Stripe’s own checkout and never reach us. We store the Stripe session reference, the amount and the time of payment so we can prove your entry was paid for.

A receipt when your payment clears, a notice if someone takes first place from you, and a message when the leaderboard closes. These are part of the service you bought, not marketing. We do not send newsletters and we do not sell your address.

• Vercel — hosting. Server logs, including IP addresses, are processed to deliver the site.
• Supabase — database and file storage for entries and logos.
• Stripe — payment processing. See Stripe’s own privacy policy for what they collect.
• Resend — email delivery, if configured.

Some of these process data outside the EU. Transfers are covered by the European Commission’s standard contractual clauses.

This site sets no tracking or advertising cookies and shows no cookie banner because it does not need one. The visitor counter deliberately works without storing anything in your browser at all — no cookie, no local storage. The only cookie we set is a session cookie on the administration area, which visitors never see. Stripe sets its own cookies on its checkout pages, which are governed by Stripe’s policy.

Entries and their logos stay for as long as the leaderboard and the resulting campaign are documented. Records of payments are kept for as long as tax and commercial law require, which in Germany is up to ten years. Abandoned checkouts are deleted automatically after one hour.

You can ask for access, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. Write to info@theshortcutagency.de. Note that removing a published entry does not refund it, and that we may have to keep payment records to meet legal retention duties.

You also have the right to complain to a supervisory authority in the EU member state where you live or work.

This notice describes what www.kdramaadspace.xyz actually does, but it has not been reviewed by a lawyer. Have it checked before launch, and keep it in step with any analytics or marketing tools you add later.