Privacy Policy

Last updated: 20. October 2026

1. Who is responsible

The controller under Art. 4(7) GDPR is:

Lir Labs Germany UG (haftungsbeschränkt), Kopernikusstraße 14, 30167 Hannover, Germany
Email: hello@lirlabs.com
We have not appointed a data protection officer because we are legally not required to (Sec. 38 BDSG).

2. Summary

  • We do not use cookies and we do not store anything on your device.
  • We do not use advertising or social media tracking, and we do not load content from third parties when you open a page.
  • We measure how the site is used with PostHog, hosted in the EU, set up so that it cannot recognise you.
  • If you write to us, we process your message to answer it.

3. Hosting and server logs (Vercel)

Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, your browser sends data that the server must process to deliver it: your IP address, date and time, the page requested, the amount of data transferred, browser and operating system, and the referring page. Vercel processes this on our behalf and keeps technical logs for security and operation.

  • Purpose: delivering the site, security, error analysis.
  • Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure and working website).
  • Retention: 1 day period.
  • Processor: Vercel, under a data processing agreement. The transfer to the USA relies on the standard contractual clauses of the European Commission (Art. 46(2)(c) GDPR) that are part of that agreement.

4. Website analytics (PostHog)

We use PostHog to understand how the site is used and to find errors. PostHog is operated by PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA. We use its EU cloud, so the data is stored in the EU. Your browser sends analytics requests to our own domain, which forwards them to PostHog.

What is collected:

  • pages visited and clicks on contact links,
  • technical details such as browser, device type, operating system and screen size,
  • approximate location (country or region) derived from the IP address. The IP address itself is not stored,
  • error reports.

How it works:

  • No cookies and no local or session storage are used. We set no identifier in your browser. Data is held in memory only while the page is open, so we cannot recognise you across visits.
  • We do not record your screen, keystrokes or input.
  • We do not sell the data and do not use it for advertising.
  • Purpose: improving content, usability and stability of the site.
  • Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in understanding and improving our site). Because nothing is stored on or read from your device in a way that requires consent, we do not use a consent banner (Sec. 25 TDDDG).
  • Retention: 1 year period.
  • Processor: PostHog, under a data processing agreement.
  • You can object at any time, see section 9.

5. Contact by email

If you contact us at hello@lirlabs.com, we process your email address, your message and any details you give us, to answer your request and for follow-up.

  • Legal basis: Art. 6(1)(b) GDPR if the request relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (our interest in answering business enquiries).
  • Retention: until the matter is settled, then deleted unless we must keep it under commercial or tax law (generally 6 or 10 years, Sec. 257 HGB, Sec. 147 AO).
  • Our email is provided by Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We have a data processing agreement with Google. Your data is not transferred to a third country.
  • The contact option on the site shows our email address and links to our social profiles. It does not collect data on the website itself.

6. Links to other sites

The site links to our profiles on LinkedIn and Instagram. These are plain links. No data is sent to those platforms until you click one. After that, the provider's own privacy policy applies (LinkedIn Ireland Unlimited Company; Meta Platforms Ireland Limited).

7. Fonts and other resources

All fonts and images are served from our own domain. We do not load fonts, scripts or images from third-party servers.

8. Recipients and transfers to third countries

Recipients are the processors named above: Vercel, PostHog and Google. We do not pass your data on to others unless the law requires it. Where data goes to the USA, see section 3.

9. Your rights

You have the right to:

  • information about your data (Art. 15 GDPR),
  • correction (Art. 16),
  • deletion (Art. 17),
  • restriction of processing (Art. 18),
  • data portability (Art. 20),
  • object to processing based on legitimate interests (Art. 21). We will then stop unless we can show compelling reasons.

Because the analytics does not identify you, we may not be able to find your analytics data (Art. 11 GDPR). To exercise your rights, write to hello@lirlabs.com.

You can also complain to a data protection authority. The authority responsible for us is Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

10. No obligation to provide data, no automated decisions

You do not have to give us any personal data to use the site. We do not use automated decision-making or profiling under Art. 22 GDPR.

11. Changes

We update this policy when the site or the law changes. The current version is always on this page.

Get in touch

hello@lirlabs.comLinkedInInstagram