Privacy.

Who’s responsible

NC Labs GmbH, Maneggstrasse 83, 8041 Zürich, Switzerland, is the data controller. Contact hello@nclabs.ch for privacy requests.

What we use

Early access: your email, chosen offer, consent record, signup date and campaign details let us manage the list and send the launch emails you request. Providing an email is optional. We do not collect payments, fog scores, spending notes or habit details.

Site measurement: Supabase records page loads, engagement, the first offer-button click and new signups, with page, headline, button position, campaign and ad-zone tags. A random page-visit ID links these events and, if you sign up, your signup. It isn’t a persistent browser identifier. Hosting providers also process technical request data, including IP addresses, for delivery and security.

Ad measurement: Hilltop visitors’ pseudonymous click token is kept for the browser session and carried on internal links. The first offer click sends only the token and our advertiser ID to Hilltop. No email, form details or spending information is shared. Hilltop can match the token to the original ad click. We use no Plausible script or advertising cookies.

We use consent for launch emails and legitimate interests in operating, securing and measuring the site where applicable law permits. We do not sell your data or make automated decisions with legal effects.

Providers and locations

Vercel hosts the site; Supabase stores signups and events in Germany. Operations and support may also involve the United States and Singapore. Hilltop (United Kingdom) receives ad-conversion tokens. Transfers use applicable adequacy decisions or providers’ contractual safeguards, including standard contractual clauses with Swiss adaptations where required. Details: Vercel, Supabase, and Hilltop. No automated email delivery provider is connected yet.

Retention and your choices

Signups are deleted after 12 months or sooner on request; measurement events after 90 days. A one-way token hash, postback status and timestamps remain for the integration’s lifetime to prevent repeat conversions. Provider logs and backups follow their retention schedules.

You may request access, correction, deletion, restriction or portability where applicable, object to processing, and withdraw email consent at any time via hello@nclabs.ch. Withdrawal does not affect earlier lawful processing. You can complain to the Swiss FDPIC or your local data-protection authority. The service is for adults 18+.