privacy policy

Privacy Policy

Last updated: 17 August 2026

1. General Information

We respect your privacy

The protection of your personal data is very important to us. Accordingly, we treat your personal data confidentially and in accordance with statutory data protection regulations and the following privacy policy.

What this covers

This privacy policy describes how we process personal data and what rights you have.

Personal data is data that allows direct or indirect identification of you as an individual. The processing of such data refers to any handling of the data, such as the collection, storage, use or deletion of personal data.

Data controller

As the data controller responsible for processing your personal data, we are happy to assist you with any questions, suggestions or complaints via the following contact details:

Poor.dev GmbH
Ulrichgasse 2/30
1020 Vienna
Email: aram@poor.dev

2. Visits to the landing page (server logs)

When you visit our website, the web server collects usage data (known as server logs). The collection of this data is necessary to technically enable the connection to our server and the use of the website. This data is also used to defend against and analyse attacks.

The following data is collected in the server logs:

  • IP address of the device used to access our website;
  • Identification data of the browser and operating system used;
  • Date, time and duration of the visit;
  • the HTTP status code
  • Name of the files or information accessed;
  • Amount of data transferred;
  • A notification as to whether the request was successful;
  • Internet addresses of the websites via which our website is accessed;
  • Web addresses of the websites accessed via our website.

Legal basis: Your data is processed on the basis of our legitimate interest in ensuring the operation of the website and system security.

Recipients of the data: We host our website via the GitHub Pages service ( ) provided by GitHub Inc. (88 Colin P. Kelly Jr. St., San Francisco, CA 94107, USA; hereinafter ‘GitHub’ ) as a data processor. By using the GitHub Pages service, data is transferred to GitHub. As GitHub’s headquarters are located in the USA, data may be transferred to the USA. The adequate level of protection for the transfer of data to the USA is ensured by GitHub’s membership of the EU-US Data Privacy Framework.

In the unlikely event of a cyberattack, data may be transferred to law enforcement authorities.

Retention period: GitHub retains server log files for security purposes only for as long as necessary to achieve above objectives.

3. Waiting list and information on the beta programme

If you sign up to our waiting list and request information about the product launch, we will process your data to manage the waiting list or to send you the requested information (either about the launch only, or additionally about the beta version).

We use the double opt-in procedure. After entering your email address, you will receive a confirmation email in which you can confirm your registration by clicking on a confirmation link. Your email address will only be stored once you have confirmed your registration.

  • Email address;
  • What information you are requesting (launch only or also the beta version)
  • Date and time of registration;

Legal basis: We process your data on the basis of taking pre-contractual measures at your request (Article 6(1)(b) of the GDPR)

Recipients of the data: By using the Keila Cloud Service provided by Keila GmbH (“ Keila ”), Hauptstraße 10, 95517 Seybothenreuth, Germany, data is transferred to Keila. Keila acts on our behalf as a data processor, may only use the data transmitted to carry out the tasks we have commissioned, and is contractually obliged to comply with the statutory data protection regulations.

Retention period: We process your data until the launch of our product, but for a maximum of six months.

4. Web analytics

We use the web analytics service GoatCounter (GoatCounter Ltd., Ireland) for the statistical analysis and optimisation of our website. GoatCounter does not use cookies and does not create user profiles. Your data (server log information, IP address, pages visited, referrer, browser type, country) is immediately anonymised and processed in aggregated form.

Legal basis: We process your data on the basis of our legitimate interest, in accordance with Article 6(1)(f) of the GDPR, in the needs-based design, optimisation and statistical analysis of our website using privacy-friendly audience measurement.

Recipients of the data: By using the GoatCounter service, data is transferred to GoatCounter Ltd, Ireland.

GoatCounter acts as a data processor on our behalf, may only use the data transmitted to carry out the analytical activities we have commissioned, and is contractually obliged to comply with the statutory data protection regulations. No data is transferred to third countries.

Retention period: We process your data for a maximum of eight hours.

5. hCaptcha

We use the hCaptcha tool from Intuition Machines, Inc. (“hCaptcha”), 1065 SW 8th St #704, Miami, FL 33130, USA, to distinguish between human input and automated systems (bots). This protects our forms and functions from misuse, spam and DoS attacks.

Legal basis: We process your data on the basis of our legitimate interest (Article 6(1)(f) of the GDPR) in preventing spam and misuse, and in ensuring the IT security of our website.

Recipients of the data: By using the hCaptcha service provided by Intuition Machines, data may be transferred to the USA. The adequate level of protection for the transfer of data to the USA is ensured by Intuition Machines Inc.’s membership of the EU-US Data Privacy Framework.

Intuition Machines acts as a data processor on our behalf, may only use the transferred data to carry out the analysis activities we have commissioned, and is contractually obliged to comply with the statutory data protection regulations.

Retention period: We process and store the session and behavioural data collected only for as long as is strictly necessary to determine the nature of the interaction (human vs. bot). The provider usually deletes or anonymises this data immediately after analysis or, at most, stores it in aggregated form without any personal references.

6. Your rights as a data subject

You have the following rights in relation to your personal data. To exercise these rights, please send us a written request setting out your specific request.

  • Right of access: You may at any time request information on whether and which of your personal data we are processing, and obtain details of this data.
  • Right to rectification: If your data is incorrect or incomplete, you may request its rectification at any time.
  • Right to erasure: You may request the erasure of your personal data, provided that one of the grounds listed in Article 17 of the GDPR applies.
  • Right to restriction of processing: You may request that processing be restricted, provided that one of the grounds listed in Article 18 of the GDPR applies.
  • Right to data portability: You may request that your data be transferred to another data controller in a commonly used, machine-readable format, provided that one of the grounds listed in Article 20 of the GDPR applies.
  • Right to object: You may object to processing carried out on the basis of Article 6(1)(e) or (f) of the GDPR.
  • Right to withdraw consent: You may withdraw your consent at any time. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.
  • Right to lodge a complaint with the data protection authority: In the event of breaches of data protection law, you may lodge a complaint with the Austrian Data Protection Authority:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Telephone: +43 1 52 152-0
Email: dsb@dsb.gv.at