Privacy policy
This is a translation for convenience. The German version of this privacy policy is the authoritative one.
Last updated: 26 September 2026
Deutsche FassungController
The controller responsible for processing personal data on this website is Koana Labs LLC, 3833 Powerline Rd, Suite 201, Fort Lauderdale, FL 33309, United States of America, represented by Norman Dilthey. Email: norman@koana-labs.com.
Visiting the website and server log files
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, and delivered through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open a page, these providers process technically necessary data on our behalf: IP address, date and time, the page requested, the amount of data transferred, browser and operating system, and the page you came from.
This processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest is the secure and reliable delivery of the website and the prevention of attacks. Log files are deleted after a short period. They are not merged with other data.
Cookies and analytics
In addition we use Microsoft Clarity, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Clarity records how pages are used: clicks, scrolling, mouse movement and the resulting session replays and heatmaps. For this purpose Clarity stores cookies on your device (among others _clck and _clsk) and processes your IP address, browser, device type and approximate location. Entries in form fields and the content of text inputs are masked by default.
This processing is based on Art. 6 (1) (f) GDPR; our legitimate interest is understanding how our pages are used so we can improve them. Data may be transferred to the United States; Microsoft relies on the EU-US Data Privacy Framework and on standard contractual clauses. You can object at any time by emailing norman@koana-labs.com. Further information: https://privacy.microsoft.com/privacystatement.
For audience measurement and for measuring our advertising we use Google Analytics 4 and Google Ads conversion tracking with the Google tag (gtag.js), services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The tag stores cookies on your device (among others _ga, _ga_* and _gcl_au) and sets cookies in the Google domain. Google Analytics records pages viewed, referral sources, device type, browser, approximate location and interactions such as clicks on buttons and the sending of our contact form. If you reach our website through a Google ad, Google Ads can also see that someone clicked an ad and then visited our site or sent a request. We only receive aggregated statistics and cannot identify you. Google processes your IP address, browser and device data, the pages visited and the click ID of the ad.
This processing is based on Art. 6 (1) (f) GDPR; our legitimate interest is evaluating the use of our website and measuring the success of our advertising. Data may be transferred to the United States; Google relies on the EU-US Data Privacy Framework and on standard contractual clauses. You can object at any time by emailing norman@koana-labs.com, turn off personalised advertising at https://adssettings.google.com, or block cookies in your browser. Further information: https://policies.google.com/privacy and https://business.safety.google/privacy.
Fonts
For a consistent appearance, the fonts Inter and JetBrains Mono are loaded from Google Fonts. Your browser connects to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and transmits your IP address. This processing is based on Art. 6 (1) (f) GDPR; our legitimate interest is a consistent and resource-efficient presentation of the website. Further information: https://policies.google.com/privacy.
Contact by email or contact form
If you contact us by email or through the contact form, we process the information you provide (name, email address, company if given, content of the message) to handle your request. The legal basis is Art. 6 (1) (b) GDPR where the request relates to a contract, and otherwise Art. 6 (1) (f) GDPR. The data is deleted once your request has been fully handled and no statutory retention obligations apply.
When you use the contact form, we additionally process the first page of our website you visited during your visit and the page that referred you to it, so we can see which content led to your request. These two values are stored in your browser's session storage only for the duration of the visit and are sent only together with the form. To protect the form against misuse, your IP address is used briefly to limit the number of messages; it is held in memory for at most ten minutes and not stored.
Form messages are transmitted to our workspace at Slack, a service of Slack Technologies, LLC, 50 Fremont Street, Suite 300, San Francisco, CA 94105, USA, where we handle them. Slack processes the data on our behalf. The legal basis is the same as for the request itself. Messages are deleted from Slack once your request has been fully handled and no statutory retention obligations apply. Further information: https://slack.com/trust/privacy/privacy-policy.
Use of Google services through Google APIs
For our internal tool Themenradar we access keyword statistics of our own Google Ads account through the Google Ads API, such as search volumes and search trends. Access takes place via OAuth 2.0 using the credentials of our own Google account. No personal data of visitors to this website and no third-party data is processed.
The Google user data obtained through this access (access and refresh tokens of our own account) is used solely to query these statistics, stored encrypted, and is not shared with third parties, not sold, and not used for advertising. This use complies with the Google API Services User Data Policy, including the Limited Use requirements.
Transfers to third countries
Koana Labs LLC is based in the United States. Data you send to us is processed there. The providers we use, Vercel, Cloudflare and Slack, are certified under the EU-US Data Privacy Framework. Where data is otherwise transferred to third countries, this is based on the European Commission's standard contractual clauses or on your consent.
Your rights
You have the right to access the data stored about you (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), to data portability (Art. 20 GDPR), and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR). You may withdraw any consent you have given at any time with effect for the future.
To exercise these rights, an email to norman@koana-labs.com is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority.
Changes
We update this privacy policy when the website, the services we use, or the legal situation change. The version published here applies.