Privacy policy

This page explains which personal data we process on rocket-routine.com, why, on which legal basis, and which rights you have. We describe the technology as it is used today.

1. Controller

Rocket Routine GmbH, Händelstr. 10, 76327 Pfinztal, Germany. Represented by Sven O. Rimmelspacher (Managing Director). Email: hello@rocket-routine.com.

2. Hosting and servers

The pages of this website are finished files. They are stored on a server of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen) in Nuremberg, Germany; there is no content management system and no database of visitor data there. The forms (waitlist, whitepaper) are answered by a separate service on another server of Hetzner Online GmbH in Germany. We have a data processing agreement with Hetzner under Art. 28 GDPR. When you open the website, the servers necessarily process your IP address to deliver the pages and keep the website secure. We keep no access logs: your requests are stored neither on our web servers nor on our form service. The servers only write technical operation logs without any visitor data, which are overwritten automatically. Requests to the forms also pass through a forwarding server of our platform provider (also at Hetzner in Germany); whether and how long requests are logged there follows that provider's statement. There is no content delivery network between you and our servers. The legal basis is Art. 6(1)(f) GDPR (our interest in a secure, working website).

3. No cookies, no consent banner

The website sets no cookies and stores nothing in your browser. That is why there is no consent banner. The language (German or English) follows from the address of the page.

4. Reach measurement with Umami

We count the use of this website with Umami, which we run ourselves on our server in Nuremberg (umami.but-right.com); there is no external provider. Umami sets no cookies and does not store your IP address; it only creates an anonymous, hashed session identifier. It records aggregated information: the page viewed, the page you came from, screen size, language, device type, browser and country. The instance is also used for other websites; the data is kept separate per website. The analytics data is kept until we delete it. We use it to see which content is read. The legal basis is Art. 6(1)(f) GDPR (improving our website); you can object at any time, for example by email to hello@rocket-routine.com or with a content or script blocker.

5. Waitlist

When you join the waitlist, we store: your email address, your first name (only if we can derive it from your email address), your language (German or English), where the sign-up came from (for example "landing_page"), your own referral code, the referral code of the person who invited you, your place on the list, whether you shared your link, the status of your sign-up, a confirmation code and the time. We do not store your IP address, your browser type or any free text.

We use double opt-in: you receive an email with a confirmation link and are only signed up after you click it. After that we send you a welcome email with your place and your referral link, and later news about the product, for example the monthly build updates. Only after your confirmation do we create a contact at Brevo (email, first name if available, source) in the list for your language. We keep the confirmation code so that a second click on the link takes you to your place again. With every sign-up and every unsubscribe, hello@rocket-routine.com receives an internal notification with the sign-up details. We store the sign-up data at Airtable. We send emails through Brevo. For all emails of this website (waitlist and whitepaper): Brevo counts anonymously whether they are opened and whether links in them are clicked; for this they contain a small image and links redirected through Brevo. These figures are not linked to you (Art. 6(1)(f) GDPR, our interest in our emails arriving).

You can see your place on the page "Your spot on the waitlist" through your personal link. If you enter your email address there, we send you your link by email; the page never shows whether an address is on the list.

The legal basis is your consent (Art. 6(1)(a) GDPR) and, where it is about running the waitlist, Art. 6(1)(b) GDPR. We keep the data until you unsubscribe. Every email contains an unsubscribe link; after you click "unsubscribe" we delete your entry at Airtable and remove you from the waitlist list at Brevo. You can also ask us by email to delete your data. You can withdraw your consent at any time with effect for the future.

6. Whitepaper download

You receive the whitepaper by email. On the "Whitepaper" page you enter your email address and can tick a box to receive the newsletter. We send you an email through Brevo with a link that is valid for 7 days. The link contains, signed and unreadable for others, your email address, your language and your newsletter choice. We do not store your address in a database for this. In its sending log, Brevo stores that the email was sent to you.

Clicking the button on the download page downloads the PDF. If you ticked the newsletter box, the same click confirms your subscription (double opt-in). Only then do we add you at Brevo to the newsletter list of your language, with the source "whitepaper", the time of your confirmation and the wording of your consent. Without the tick we create no contact. You can unsubscribe at any time through the link in every newsletter email.

When you download, we count in our Airtable table only the document, the language and the time, without IP address and without details about your browser. The legal basis for sending the whitepaper is Art. 6(1)(b) GDPR (your request); for the newsletter it is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future.

7. Protecting the forms

To prevent abuse we limit the number of requests per IP address (waitlist and whitepaper). For this, the IP address is held only briefly in the working memory of the form service and is not written to a database.

In addition, we protect the forms with Cloudflare Turnstile by Cloudflare, Inc. (USA), so that automated programs cannot abuse them. For this, your browser loads a script from challenges.cloudflare.com on pages with a form, and Cloudflare receives technical information about your browser and your IP address. We check the result on our server and send your IP address to Cloudflare in doing so. The waitlist form is on the home page, so the script is loaded there as well. The legal basis is Art. 6(1)(f) GDPR (protection against abuse and spam).

8. YouTube

The "Weekly Build" videos only play after you click, through the address youtube-nocookie.com by Google (YouTube). The preview images are on our own server; nothing is loaded from Google before the click. When you click a video, Google receives your IP address and the playback information. The legal basis is your click (Art. 6(1)(a) GDPR).

9. Fonts, advertising, accounts

We load fonts from our own server, not from Google Fonts. Apart from the reach measurement with Umami (section 4) and the anonymous counting in our emails (section 5), we use no advertising, tracking or analytics tools, and no pixels from Google, Meta, LinkedIn or others. Visitors have no user account, shop, payment or chat on this website. The links to our LinkedIn page and YouTube channel are plain links; data only flows when you click them, and then the privacy policies of those providers apply.

10. Email contact

If you write to hello@rocket-routine.com or use the "Give feedback" link (feedback@rocket-routine.com), your own email program opens; the website collects nothing. We process your message and your sender address to reply (Art. 6(1)(b) or (f) GDPR). Our mailboxes run on Google Workspace (Google Ireland Limited).

11. Recipients and transfers to third countries

We only pass data to the providers named above, as far as needed for each purpose: Hetzner (hosting, Germany), Airtable (waitlist and download counter, Formagrid, Inc., USA), Brevo (email sending and contacts, Brevo SAS, France), Cloudflare (protecting the forms, USA) and Google (YouTube after your click, mailboxes). With providers based in the USA or other third countries, your information may be transferred there. For this we rely on the safeguards recognised by the EU Commission, i.e. the adequacy decision for the EU-US Data Privacy Framework where the provider is certified, or standard contractual clauses. Where required, we have data processing agreements with our providers.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on our legitimate interest (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Write to us at hello@rocket-routine.com. You also have the right to complain to a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Königstraße 10a, 70173 Stuttgart.

13. Obligation to provide data

You do not have to provide any data to read the website. For the waitlist and the whitepaper we need your email address; without it we cannot add you or send you the whitepaper.

14. Changes

When we change the technology of the website, we update this policy. Last updated: October 2026.