Skip to content
Back to Home

Privacy Policy

Last Updated: August 27, 2026

This Privacy Policy describes how Noctra Labs UG (haftungsbeschränkt) ("we", "us", or "our") collects, uses, and protects your personal data when you visit our website noctra-labs.com (the "Website"). We process personal data in line with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This policy covers the Website only. Our ChainATM product is covered by a separate ChainATM Privacy Policy.

1. Controller

The controller responsible for your data is Noctra Labs UG (haftungsbeschränkt), Klaus-Kordel-Straße 4, ZWO65 Coworking Trier, 54296 Trier, Germany, contact@noctra-labs.com. We have not appointed a Data Protection Officer, as we are not legally required to do so.

2. Information We Collect

2.1 Automatically Collected Information

When you visit our Website, we automatically collect:

  • Usage Data: pages viewed, time spent, and navigation patterns, collected in aggregate via Vercel Analytics and, only after you opt in, through Google Analytics
  • Technical Data: browser type, device type, operating system, IP address, and general location at country level

2.2 Information You Provide

If you use our contact form, email us, or book a call through our scheduling link, we collect:

  • Your name and email address
  • Your inquiry type and, if you provide it, your company name
  • Any information you voluntarily include in your message or booking

3. How We Use Your Information and Our Legal Bases

  • To provide and secure the Website. Legal basis: our legitimate interest in operating a functioning, secure site (Art. 6(1)(f) GDPR).
  • To respond to your inquiry and schedule calls. Legal basis: taking steps at your request prior to a possible contract, and our legitimate interest in responding (Art. 6(1)(b) and (f)).
  • To understand and improve the Website using aggregate, cookieless analytics. Legal basis: our legitimate interest (Art. 6(1)(f)). Optional Google Analytics measurement is based on your consent (Art. 6(1)(a)).
  • To comply with legal obligations. Legal basis: Art. 6(1)(c).

4. Third-Party Services

We use the following providers, who process data on our behalf or as part of their own service, each under their own privacy policy:

  • Vercel: website hosting and cookieless analytics
  • Google Analytics (Google Ireland Limited and Google LLC): optional website measurement after you consent
  • Resend: delivery of contact-form messages by email
  • Calendly: scheduling, if you choose to book a call

Web fonts are self-hosted, so loading a page does not send your IP address to a font provider. We do not sell, trade, or otherwise transfer your personal data to third parties beyond what is described here.

5. International Data Transfers

We are based in Germany (part of the EU/EEA). Some providers above are located in the United States. Where we transfer personal data outside the EEA, we rely on an appropriate GDPR safeguard, namely the EU Standard Contractual Clauses and/or the provider's certification under the EU-US Data Privacy Framework.

6. Data Retention

We keep contact and inquiry data only for as long as needed to handle your request and any reasonable follow-up, then delete it, unless a longer period is required by law. Google Analytics user-level and event-level data is configured for a two-month retention period; this setting does not control data in Google Analytics' aggregated standard reports.

7. Data Security

We implement appropriate technical and organisational measures to protect personal data. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on our legitimate interests (including direct marketing). Where we rely on consent, you may withdraw it at any time without affecting prior processing. To exercise these rights, contact contact@noctra-labs.com.

You also have the right to lodge a complaint with a supervisory authority. Our competent authority is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz; datenschutz.rlp.de). If you are in the EU/EEA, you may also complain to the authority in your country of residence.

9. Children's Privacy

Our Website is not directed to children under the age of 18. We do not knowingly collect personal data from children.

10. Cookies and Tracking

We use Vercel Analytics to collect aggregate usage data without cookies or cross-site tracking. We also offer optional Google Analytics 4 measurement. The Google tag is blocked completely and no data is sent to Google unless you select "Accept analytics". If you consent, Google Analytics sets first-party cookies beginning with _ga and measures visits, traffic sources, pages viewed, scrolls, outbound clicks, and file downloads. It processes online identifiers, session information, approximate location, browser and device information, page URLs and titles, and referrers. Google states that, for users in the EU, Switzerland, and the UK, IP addresses are used to derive approximate location and discarded before being logged or stored.

You can refuse analytics without losing access to the Website. You can reopen "Analytics settings" at any time and withdraw consent for the future; doing so disables the Google tag and removes the Google Analytics cookies for this Website. Google signals, advertising personalisation, user-provided data collection, form interaction measurement, site-search measurement, and video-engagement measurement are disabled.

Google may process Analytics data in countries outside the EEA. According to Google, relevant transfers are covered by applicable adequacy frameworks and/or the EU Standard Contractual Clauses. More information is available in Google's Privacy Policy and its information about international data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

12. Contact

If you have any questions about this Privacy Policy, please contact us:

  • Email: contact@noctra-labs.com
  • Address: Noctra Labs UG (haftungsbeschränkt), Klaus-Kordel-Straße 4, ZWO65 Coworking Trier, 54296 Trier, Germany