Privacy policy

Last updated: October 2026

The German privacy policy at castcube.de/datenschutz/ is authoritative. This English page is a translation.

1. Controller

watchyourhead UG (haftungsbeschränkt)
Albrechtstr. 2A, 65346 Eltville, Germany
Phone: +49 176 70171289
Email: Show email

2. Data we collect

We only collect personal data that you actively provide, for example in the calculator or the contact form: name, email address, phone number, company, country of the company, optional VAT ID, country of the venue, the venue itself and the configuration you selected. The language you choose is stored locally in your browser (cc_lang in localStorage), not on our servers.

3. Calculator enquiries & email delivery

Data you enter in the quote enquiry in the calculator or in the contact form is stored and processed in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to a contract). We store contact enquiries in our key-value store (Upstash Redis via Vercel KV) so we can trace them.

To protect the forms against automated requests, we limit the number of submissions from the calculator and the contact form per IP address (a maximum of 8 requests in 10 minutes). The purpose is abuse prevention. Timestamps are held temporarily in the memory of the server function. They are kept for a maximum of 10 minutes, or until the instance restarts. The IP address is not stored permanently in a database. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting the forms).

If you send yourself a price indication as a PDF, we use your name, company, email address and the selected configuration only to generate the document and send it to the address you entered. A copy goes to our team so we are prepared for follow-up questions. Legal basis: Art. 6(1)(b) GDPR. This is a transactional email, not a newsletter.

For email delivery we use Resend (Resend Inc., 2261 Market Street, San Francisco, CA 94114, USA). Your contact details are transferred to Resend servers in the USA in order to deliver the email. Resend processes this data solely for delivery. The transfer to the USA is based on standard contractual clauses under Art. 46(2)(c) GDPR. Further information: resend.com/legal/privacy-policy.

4. 3D configurator

Artwork you upload stays in your browser unless you carry it into the quote PDF through the calculator or create a continue-working link. An enquiry is only possible through the calculator (section 3), not from the configurator.

5. Shared configuration

If you create a continue-working link in the 3D configurator, we store a snapshot of the configuration (model, colour, floor, face assignment) and the uploaded artwork for 30 days. The link is short and not guessable; anyone who has it can keep working on the configuration, including the artwork. It is a copy, not a live document. A new share creates a new link. After expiry we delete the entry and the associated files. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in collaboration without a user account). Files are stored with Vercel Blob, the snapshot with Upstash Redis (KV), both as part of our hosting.

6. Hosting & infrastructure

This website is hosted by Vercel Inc., 340 Pine Street Suite 701, San Francisco, CA 94104, USA. When the site is accessed, technical data (IP address, browser, time of access) is automatically written to server log files. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

7. Web analytics (Vercel Analytics)

This website uses Vercel Analytics (Vercel Inc., San Francisco, CA, USA) to analyse usage. Anonymised usage data is recorded (page views, country of origin, device class). No cookies are set and no personal data is stored permanently. The IP address is not stored. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in anonymous usage statistics). Further information: vercel.com/docs/analytics.

8. Configurator usage statistics

In the 3D configurator we record anonymously how long the tab is visible and which final state (model, colour, floor, whether artwork or exports occurred) exists at the end of the session. There are no cookies for this, no IP storage and no personal reference. Random session IDs live only in the sessionStorage of the tab. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in developing the product). Where configured, counters are stored in aggregate on our side and are not linked to enquiries.

9. Google Fonts

This website loads fonts from Google Fonts (Google LLC, Mountain View, CA, USA). Your IP address is transferred to Google servers in the process. Legal basis: Art. 6(1)(f) GDPR. Google processes this data in line with the Google privacy policy.

10. CDN (Cloudflare)

For animation libraries (GSAP) we use the Cloudflare CDN (Cloudflare, Inc., San Francisco, CA, USA). Your IP address may be transferred in the process. Legal basis: Art. 6(1)(f) GDPR.

11. Cookies

This website uses no tracking or analytics cookies. Technically necessary entries in localStorage: the cookie notice (cookieConsent), the language choice (cc_lang) and, in the configurator, the one-off quick guide (cc_help_v2). sessionStorage holds an anonymous session ID and, after “Continue to price”, the handover of views and artwork to the calculator. A continue-working link is not stored in the browser but for 30 days on the server (see section 5). You can reopen the cookie notice at any time via “Cookies” in the footer.

12. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). For complaints, please contact the data protection authority of the State of Hesse (Landesbeauftragter für Datenschutz Hessen).