Privacy Policy
Last updated: May 11, 2026
1. Controller
Kobe UG (haftungsbeschränkt)
Pauline-Staegemann-Straße 2
10249 Berlin
Germany
Email: nils@getkobe.ai
Phone: +49 160 97737599
If you have any questions about data protection, you can contact us at the address above.
2. Overview of Data Processing
We process personal data only to the extent necessary to provide and improve our website and services. Below we describe each processing activity, the data involved, the legal basis, and any third parties that receive data.
3. Hosting
This website is hosted by Vercel, Inc. (USA). When you visit our website, Vercel processes your IP address, browser type, operating system, referrer URL, and timestamp to deliver the page. All data is transmitted via TLS-encrypted connections. This data is processed on servers that may be located in the United States.
Data retention: Server logs are retained per Vercel's Data Processing Agreement.
Legal basis: Legitimate interest in providing a reliable and performant website (Art. 6(1)(f) GDPR).
Transfer safeguard: We have concluded a Data Processing Agreement pursuant to Art. 28 GDPR with Vercel, which includes Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.
4. Vercel Analytics
We use Vercel Analytics to understand how visitors use our website. Vercel Analytics is cookieless by design — it does not set cookies, does not collect personally identifiable information, and does not track individual users across sessions.
Data collected includes page views, device type, browser, and approximate location derived from anonymized IP addresses.
Visitor sessions are discarded after 24 hours. Aggregated statistics are retained for as long as they remain relevant to improving our service. We review retention periodically.
Legal basis: Legitimate interest in understanding website usage to improve our service (Art. 6(1)(f) GDPR).
5. PostHog Analytics
We use PostHog (PostHog, Inc.) hosted on their EU Cloud (Frankfurt, Germany) for website analytics, session recordings, and heatmaps. PostHog only activates after you consent to statistics cookies via our cookie banner. If you do not consent, no PostHog data is collected.
When active, PostHog collects: page views, clicks, scroll depth, mouse movements (heatmaps), and session recordings. Session recordings mask email and password input fields automatically. Name and phone input fields are excluded from capture via the ph-no-capture class.
PostHog uses cookies and browser local storage to maintain session state. Cookies are prefixed with ph_ on the .getkobe.ai domain to maintain your anonymous session identifier across subdomains, including our product subdomain at app.getkobe.ai. This allows us to measure conversion from the marketing website to the product without using any personally identifying data. Local storage is used on the same domain for supplementary session data. Both are only set after consent is given.
PostHog respects the Do Not Track (DNT) browser setting. If DNT is enabled, PostHog will not capture any data regardless of consent status.
You can opt out at any time by withdrawing your consent via the cookie banner.
Data retention: Session recordings are retained for up to 30 days. Analytics event data is retained for up to 1 year.
Legal basis: Consent (Art. 6(1)(a) GDPR).
We have concluded a Data Processing Agreement pursuant to Art. 28 GDPR with PostHog, which includes Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. For more information, see the PostHog Privacy Policy.
6. Consent Management (Cookiebot)
We use Cookiebot by Usercentrics A/S (Denmark) to manage your cookie consent preferences. When you interact with the consent banner, Cookiebot stores your choice in a cookie named CookieConsent on your device.
Cookiebot processes your anonymized IP address, the date and time of your consent, the consent status, and our website URL.
Data retention: Consent records are stored for 12 months, matching the duration of the consent cookie.
Legal basis: Legal obligation to document consent (Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR).
We have concluded a Data Processing Agreement pursuant to Art. 28 GDPR with Usercentrics. For more information, see the Cookiebot Privacy Policy.
7. Waitlist Signups
When you join our waitlist, we collect the following data: name, email address, job title/role, phone number (optional), and company name. Providing this data is voluntary. If you choose not to provide the required fields, you will not be added to the waitlist.
By submitting the waitlist form, you consent to receiving product-related emails from us (e.g., launch announcements, early access invitations, product updates, and feature news). You will receive a confirmation email to verify your email address (double opt-in). Every email contains an unsubscribe link that allows you to withdraw your consent at any time. You can also contact us directly to request removal.
Your data is transmitted to our email service provider Loops (Astrodon, Inc., USA) for the purpose of managing the waitlist and sending emails. At the time of submission, we also capture any UTM marketing attribution parameters from the current URL. If you have consented to marketing cookies, these parameters may also be read from the kobe_utm cookie (see Section 8) for cross-session attribution. This helps us understand which marketing channels are effective.
Data retention: Your waitlist data is stored until you withdraw your consent or request deletion. If you do not confirm your email address (double opt-in), your data is automatically deleted after 30 days.
Legal basis: Consent (Art. 6(1)(a) GDPR).
Transfer safeguard: We have concluded a Data Processing Agreement pursuant to Art. 28 GDPR with Loops, which includes Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.
8. Cookies
This website uses the following cookies and client-side storage:
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
kobe_utm | Stores UTM marketing attribution parameters (source, medium, campaign, term, content). Only set after marketing consent is given via the cookie banner. | 30 days | First-party, marketing |
CookieConsent | Stores your cookie consent preferences (Cookiebot) | 12 months | First-party, necessary |
ph_* | PostHog analytics — anonymous session identifier and feature flags (only set after statistics consent) | 1 year | First-party, statistics |
In addition, the following data is stored in your browser's local storage:
| Key | Purpose | Duration | Type |
|---|---|---|---|
visitor_id | A randomly generated anonymous identifier (UUID) used to tie anonymous analytics data together across pageviews. It contains no personal information and cannot identify you on its own. | Session (without statistics consent) / Persistent (with statistics consent) | sessionStorage by default; promoted to localStorage when statistics consent is granted |
ph_* | PostHog analytics — anonymous session identifier, feature flags, and event queue. Mirrors the ph_* cookie (see cookie table above) so analytics remain available even if cookies are cleared. Only set after statistics consent. | 1 year | localStorage, statistics |
UTM parameters are also stored in your browser's session storage (not a cookie, not listed above) to preserve marketing attribution as you navigate within a single browsing session. This data is automatically discarded when you close the tab.
You can withdraw or change your cookie preferences at any time by clicking the cookie settings link in the footer of our website.
9. Automated Decision-Making
We do not use automated individual decision-making or profiling as defined in Art. 22 GDPR. No decisions with legal or similarly significant effects are made about you by purely automated means.
10. Your Rights
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR) — You can request information about what personal data we process.
- Right to rectification (Art. 16 GDPR) — You can request correction of inaccurate data.
- Right to erasure (Art. 17 GDPR) — You can request deletion of your data, subject to legal retention obligations.
- Right to restriction of processing (Art. 18 GDPR) — You can request that we restrict processing of your data in certain circumstances.
- Right to data portability (Art. 20 GDPR) — You can request your data in a structured, commonly used, and machine-readable format.
- Right to object (Art. 21 GDPR) — Where we process your data based on legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. We will then cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. Where your data is processed for direct marketing purposes (Art. 21(2) GDPR), you have the right to object at any time, and we will cease processing for that purpose without exception. You can exercise this right by using the unsubscribe link in any of our emails or by contacting us directly.
- Right to withdraw consent (Art. 7(3) GDPR) — Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at nils@getkobe.ai.
11. Right to Lodge a Complaint
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. You may contact the supervisory authority in your place of residence, your place of work, or our registered office:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel
Germany
www.datenschutzzentrum.de
12. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our data processing practices or legal requirements. The current version is always available at getkobe.ai/privacy.