Privacy policy

Last updated: 30 September 2026

In short

We only process what your browser needs to load this website and what you enter in a waitlist form. We use your details for one thing: telling you when cashgrab launches in your city. No cookies, no tracking.

Who is responsible

Stefan Kern
Kleinsachsenheimer Straße 36
74343 Sachsenheim
Germany
Email: hello@cashgrabapp.com

Visiting this website

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When you open a page, Netlify processes the technical data needed to deliver it: IP address, date and time, the page requested, browser and operating system and, where sent, the previous page (referrer). This is needed to deliver the website and protect it against attacks. Legal basis is our legitimate interest in a secure, working website (Art. 6 (1) (f) GDPR).

Waitlist forms

When you join a waitlist we process what you enter:

We also store the language of the page and the time of your entry. We use these details only to email you when cashgrab or a pilot starts in your city. We do not send advertising for others and do not pass your details on, except to the service providers named below.

Legal basis is your consent, which you give with the checkbox in the form (Art. 6 (1) (a) GDPR). Giving your details is voluntary; without them we cannot add you to the list. You can withdraw your consent at any time by emailing hello@cashgrabapp.com. The withdrawal applies from then on; processing up to that point remains lawful.

Entries are stored with Netlify (Netlify Forms), which checks them automatically for spam. A hidden field keeps simple bots out; we use no captcha.

Email

If you email us, for example as an investor, we process your address and your message in order to reply (Art. 6 (1) (b) GDPR for enquiries about a contract, otherwise Art. 6 (1) (f) GDPR). Our mailboxes are hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. We delete messages once the matter is settled, unless we are required to keep them.

Service providers and transfer to the USA

Netlify and STRATO process data on our behalf and on our instructions (Art. 28 GDPR). Netlify is based in the USA and is certified under the EU-U.S. Data Privacy Framework; the transfer is covered by the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR). Netlify has also agreed to the EU standard contractual clauses.

No tracking

We use no cookies, no analytics and no advertising trackers. Fonts are loaded from our own server. The Instagram link is a plain link; Instagram only receives data if you click it.

How long we keep data

Waitlist entries: until you withdraw consent or we no longer need them for the launch information, at the latest 24 months after you signed up. Access data: only as long as Netlify needs it to run and secure the website.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). An email to hello@cashgrabapp.com is enough. You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

We make no automated decisions and create no profiles.