Legal
Privacy policy
Last updated: 1 November 2026
1. Who is responsible
Eugene Wahome Muiruri, Am Heimbergsflur 10, 97941 Tauberbischofsheim, Germany. Email: info@hausnightingale.eu, phone: +49 176 80859502.
2. What Nightingrail does with your data
Nightingrail is a trading journal. We process personal data only to provide the journal to you, keep it secure and answer your questions. We do not use advertising, tracking or analytics tools, and we do not sell data.
3. Signing in with Google
You sign in with your Google account. Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) confirms your identity and passes us your name, email address and profile picture. Legal basis: Art. 6(1)(b) GDPR (providing the service you asked for). Google's own privacy policy applies to the sign-in itself.
4. Your journal, trades and screenshots
Trades you record (instrument, session, levels, results, notes, ratings) and screenshots you upload are stored with your account so that only you can see them. We store them with Supabase Inc. (database and file storage, hosted in the European Union, Ireland region). Legal basis: Art. 6(1)(b) GDPR. We keep this data until you delete it or ask us to delete your account.
5. Hosting
The website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When you visit the site, technically necessary data such as your IP address, date and time, and the page requested are processed to deliver the site and protect it from misuse. Legal basis: Art. 6(1)(f) GDPR (secure, reliable operation). Transfers to the USA are based on the EU–US Data Privacy Framework and/or the EU standard contractual clauses.
6. Storage in your browser
We store only what the site needs to work: your sign-in session, your chosen appearance (dark or light) and, for the current browser tab only, a copy of your access status and trades so pages open quickly. Nothing is used for tracking. Legal basis: § 25(2) TDDDG (strictly necessary) and Art. 6(1)(b) GDPR. You can clear this storage in your browser at any time.
7. Payments
If you buy a plan, payment is handled by Stripe Payments Europe Ltd. (1 Grand Canal Street Lower, Dublin 2, Ireland). Stripe receives your name, email address, payment details and billing address and processes them as its own controller for payment and fraud prevention. We receive only your plan, its status and dates, and a customer reference, never your full card details. Legal basis: Art. 6(1)(b) GDPR and, for keeping invoices, Art. 6(1)(c) GDPR with § 147 AO and § 257 HGB (up to ten years). Stripe may transfer data to the USA on the basis of the EU–US Data Privacy Framework and the EU standard contractual clauses. See stripe.com/privacy.
8. Emails about your contract
Confirmations, for example of a cancellation, are sent through Resend (Plus Five Thirty Inc., USA) on our behalf. Resend processes your email address and the message for delivery only. Legal basis: Art. 6(1)(b) and (c) GDPR. Transfers to the USA are based on the EU standard contractual clauses. We do not send newsletters or advertising.
9. Contacting us
If you email us, we use your message and address to reply. Legal basis: Art. 6(1)(b) or (f) GDPR. We delete the correspondence when it is no longer needed, unless we must keep it by law.
10. Your rights
- Access to your data (Art. 15 GDPR)
- Correction (Art. 16) and deletion (Art. 17)
- Restriction of processing (Art. 18) and data portability (Art. 20)
- Objection to processing based on Art. 6(1)(f) (Art. 21)
- Complaint to a supervisory authority (Art. 77), for example: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart
To use these rights, write to info@hausnightingale.eu.