Privacy policy

This is a translation for convenience. The legally binding version is the German original.

1. Controller

Samuel Jahn
Karlstrasse 118, 80335 München
Email: robobumper@gmx.com

No data protection officer has been appointed, as there is no legal obligation to do so.

2. The essentials in brief

Planning works without an account; we don't ask for your name or email address for it. An account is optional – all we need for it is your email address.
For AI plan suggestions, your answers and free text go to Google (Gemini) – without name, email or IP address. Google doesn't use them for training.
We store your plan (components, connections, title) so that you can share it via a link and continue editing it later.
We count visits without cookies and without storing your IP address. Heatmaps and session recordings only happen with your consent.
Personalised advertising (Google AdSense) only appears if you consent in the cookie banner. Without consent you see non-personalised ads without cookies.
Links to Amazon are affiliate links. What Amazon stores after the click is governed by Amazon.

3. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit it, the server automatically processes: IP address, date and time, requested address, amount of data transferred, browser and operating system (user agent) and the previously visited page (referrer).

The purpose is to deliver the website and to fend off attacks. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is secure, stable operation. Server logs are deleted after 7 days. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

4. Storing your plans

When you create a plan, we store it via the Supabase service (Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513, Singapore). The data is stored on servers in the EU (Ireland). We store: the content of the plan, its title, creation and modification time and an encrypted check value of the edit key. Please don't put personal data into the title.

The purpose is to provide the planning tool, including sharing via a link. The legal basis is Art. 6 (1) (b) GDPR (use of the service). Anyone who knows the link can view the plan. Plans are deleted 24 months after their last change.

A data processing agreement is in place with Supabase. As Supabase is based in Singapore and uses sub-processors in the USA, access from these countries cannot be ruled out; the transfer is safeguarded by the European Commission's standard contractual clauses.

5. Optional account and PDF plans

You only need an account if you want to save your plans across devices or get them as PDF. For the account we process via Supabase (Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513, Singapore, servers in the EU): your email address, time of registration and last sign-in, the plans assigned to your account and the PDF files created from them. There is no password – you sign in via a link we email to you.

The legal basis is Art. 6 (1) (b) GDPR (providing the account at your request). The data is kept until you delete your account. You can do that at any time under “Account” → “Delete account and data”: account, plans and PDFs are then permanently deleted.

You only receive build tips by email if you explicitly tick the box when signing up (Art. 6 (1) (a) GDPR). We store your consent and its time. You can withdraw it at any time under “Account”.

6. AI plan suggestions (Google Gemini)

When you click “Create plan” in the planner, our server sends your answers (solar, off-grid days, selected devices) and your optional free text to Google's Gemini API (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The AI suggests components and sizes; our own software then creates and checks the wiring diagram. Google receives neither your name nor your email or IP address – the request comes from our server. Please don't enter personal data in the free text.

We use Google's paid service: Google doesn't use the inputs and responses to train its models and processes them under its data processing agreement. Google stores them for a limited period to detect abuse. Processing in the USA cannot be ruled out; Google LLC is certified under the EU-US Data Privacy Framework.

The legal basis is Art. 6 (1) (b) GDPR – you request the plan suggestion. We don't store your free text on our servers or write it to logs. In your browser, your answers are kept until you close the tab and the AI's explanation of the plan in local storage; it also appears in the PDF plan.

7. Protection against abuse

To prevent plans from being created automatically in bulk, we count requests per sender. To do so, we compute a hash value (SHA-256) from your IP address, a secret random value and the current date. The IP address itself is not stored; the hash value changes daily and cannot be traced back to you. The counter entries are deleted after two days at the latest. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is protecting the service against abuse.

8. Storage in your browser

The app stores the following in your browser's local storage:

the edit key of your plans – without it you can only view a plan,
the list “Your designs” with title and date,
which steps of the connection guide you have ticked off,
the explanation of an AI plan suggestion (for the PDF plan),
your language choice, if you switched between van-wiring.de and van-wiring.com,
if you are signed in: your sign-in session,
your decision in the cookie banner.

This data doesn't leave your browser. It is strictly necessary for the function you requested; the legal basis is § 25 (2) no. 2 TDDDG. You can delete it at any time in your browser settings – afterwards you can no longer edit your plans.

9. Fonts

Fonts are loaded from our own server. There is no connection to Google Fonts.

10. Consent management

To ask for your consent we use a consent management tool. The tool stores your decision and the consent ID so that it can be proven (Art. 7 (1) GDPR). The legal basis is Art. 6 (1) (c) GDPR. You can change or withdraw your consent at any time via the “Cookie settings” link in the footer.

11. Visitor statistics with Umami

To understand how the planner is used, we count visits with Umami, open-source software that runs on our own server at Hetzner. No data is passed on to third parties.

We record: pages visited, the page you came from (referrer, e.g. a search engine), campaign parameters in links, time spent, clicks on selected buttons (e.g. “Create design”, Amazon links, connection guide), browser, operating system, device type, screen size, language and country or region. Umami sets no cookies and stores nothing on your device. An anonymous hash value is formed from IP address and browser identifier to count visits; the IP address itself is not stored.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is improving the service based on aggregated usage figures. The data is deleted after 26 months.

12. Usage analysis with PostHog (only with consent)

If you agree to “Statistics & usage analysis” in the cookie banner, we use PostHog (PostHog, Inc., 2261 Market St. #4008, San Francisco, CA 94114, USA) to see how visitors work with the planner: heatmaps (where people click and how far they scroll), session recordings (mouse movements, clicks, scrolling and page changes as a replay) and flows such as “Home → Editor → Parts list”. Input in form fields is always masked.

We process: the interactions mentioned, pages visited, referrer, browser, operating system, device type, screen size, approximate location (derived from the IP address) and a random identifier that PostHog stores in a cookie or in your browser's local storage. The data is stored on servers in Frankfurt am Main (EU). Session recordings are deleted after 30 days, other usage data after 12 months.

The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG), which you can withdraw at any time via “Cookie settings” in the footer. A data processing agreement is in place with PostHog. As PostHog is a US company, access from the USA cannot be ruled out. PostHog is certified under the EU-US Data Privacy Framework; the European Commission's standard contractual clauses also apply.

13. Advertising with Google AdSense

On the home page, in the blog and in the connection guide we show advertising via Google AdSense (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). There is no advertising in the planning tool itself.

With your consent, Google uses cookies and similar technologies to show personalised advertising, measure its reach and prevent fraud. This involves processing IP address, device and browser information, pages visited and interactions with ads, among other things. The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG).

Without consent, Google only shows limited, non-personalised ads (“Limited Ads”). No cookies or similar technologies are stored on or read from your device. Google does process your IP address to deliver the ad and roughly derives your region from it. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is funding the free service.

Google may transfer data to the USA. Google LLC is certified under the EU-US Data Privacy Framework. More information: policies.google.com/technologies/ads.

14. Amazon affiliate programme

We take part in the Amazon Associates Program (amazon.com). Links to Amazon are marked with * and contain our partner ID. No connection to Amazon is made until you click. After a click, Amazon (Amazon.com Services LLC, 410 Terry Avenue North, Seattle, WA 98109, USA) processes data on its own website in the USA to attribute sales to our partner ID; Amazon's privacy notice applies. We only receive aggregated sales reports with no reference to you as a person.

15. Links to manufacturers

Links to manufacturers' websites (e.g. Victron Energy, WAGO) open their website. From the click onwards, the respective manufacturer's privacy notice applies.

16. Contact by email

If you write to us, we process your email address and the content of your message to reply to it (Art. 6 (1) (b) or (f) GDPR). We delete the message as soon as the request has been dealt with and no retention obligations apply.

17. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7 (3)).

Please note: we can only identify plans without an account if you give us their link. With an account you find all your plans under “My plans” and can delete your account and data there yourself.

You can lodge a complaint with a data protection supervisory authority, e.g. the one responsible for us:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany

18. Effective date

This privacy policy applies from 10 October 2026.