Privacy

How Alpha-DJ-Engine handles your data.

Entwurf — inhaltlich vollständig, drei Punkte hängen an der Umsetzung. Offen sind die Logfile-Aufbewahrungsdauer, das Consent-Banner für Google Analytics und das Double-Opt-in-Backend für das E-Mail-Formular. Bis dahin trägt die Seite noindex — und GA sowie das Formular dürfen nicht scharf geschaltet werden.

Controller

Alphabees UG (haftungsbeschränkt)
Kolonnenstraße 8, 10827 Berlin, Germany
Phone: 0049 (0)30 20008140
Email: info@alphabees.de

Responsible for data protection: Lasse Erdweg, reachable at the address above.

Your account

Using Alpha requires an account. We store your email address, a username and your password. The username does not have to be your real name — pick whatever you like. Passwords are never stored in plain text; we keep only a salted hash.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract.

Licence and devices

We store your licence key together with an identifier for each device you activate. We need this to honour the licence terms — one person, one device — and to let you move your licence to a new machine.

While you are on the free tier, we also count how many tracks you have analyzed, up to the limit of ten. After that the counter stops mattering: the paid licence is unlimited and permanent.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract.

What the app sends us

Your audio files stay on your machine. Tempo, key and energy are computed locally, and no audio is ever transmitted.

Arranging your set is done on our servers. For that, the app sends the metadata of the tracks in your set — such as title, artist, tempo, key, energy and duration — so the sequencing engine can order them. This is what makes the harmonic arrangement work.

Writing the USB drive is local as well — the drive is plugged into your machine, not ours.

The app contains no crash reporting and no usage analytics. It does not report back what you do with it.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract.

How long we keep your account

Because the licence is permanent, we keep your account data for as long as your account exists. You can ask us to delete it at any time and we will, subject only to invoices and accounting records, which German tax and commercial law (§ 147 AO, § 257 HGB) requires us to retain for up to ten years.

This website

The site consists of static pages and loads nothing from anyone else — fonts, stylesheets, scripts and icons all come from this domain. No request goes to Google Fonts or to any content delivery network.

Hosting is provided by Hetzner Online GmbH, in a data centre in Germany, as our processor under a data processing agreement (Art. 28 GDPR). Their servers keep the usual access logs — your IP address, the time of the request, the page requested, the referring page and your browser's user agent. We use these only to operate the site securely and to investigate faults.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in a working, secure website.

Offen: die tatsächliche Aufbewahrungsdauer der Logfiles. Sie muss mit der Server-Konfiguration übereinstimmen — üblich und gut vertretbar sind sieben Tage. Bitte bei Hetzner prüfen und hier eintragen.

Die CDN-Einbindungen von Tailwind und Lucide sind seit 2026-08-19 entfernt; dieser Punkt ist damit erledigt.

Cookies and analytics

The site itself sets no cookies of its own.

We use Google Analytics 4, a service of Google Ireland Ltd., to understand how the site is used. It sets cookies and processes usage data, including a shortened form of your IP address. This happens only if you consent; you can withdraw that consent at any time with effect for the future. Data may be transferred to Google LLC in the USA, safeguarded by the European Commission's standard contractual clauses.

Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG — your consent.

Offen: nur noch die GA-Mess-ID. Der Consent-Banner steht (drei Stufen, Widerruf über „Cookie settings" im Footer) und setzt Google Consent Mode v2 korrekt — Ausgangszustand ist alles denied. Google Analytics selbst ist noch nicht eingebunden: In js/site.js → loadAnalytics() ist der Block markiert, in den die Mess-ID G-XXXXXXX gehört. Erst danach lädt GA, und zwar nur nach Einwilligung.

Email addresses you give us

If you leave an email address — for the download link, or to tell us which device you use — we confirm it with you first: you will receive a message with a confirmation link, and we only add your address once you have clicked it (double opt-in). We record the time of your confirmation so we can demonstrate that you gave it.

We use your address to send you what you asked for and occasional news about Alpha. We do not pass it on. Every message contains an unsubscribe link, and you can withdraw your consent at any time with effect for the future.

We keep your address until you unsubscribe. After that we retain the record of your consent for up to three years, so we can show it was given if that is ever questioned.

Emails are sent through Twilio SendGrid as our processor under a data processing agreement (Art. 28 GDPR). Where processing takes place outside the EU, it is safeguarded by standard contractual clauses.

Legal basis: Art. 6(1)(a) GDPR — your consent.

Umsetzung fehlt noch: Das Formular auf der Website hat noch kein Backend — Double-Opt-in-Mail, Bestätigungslink und Abmeldelink müssen gebaut werden, bevor dieser Abschnitt stimmt.

Payment

Payments are processed by Stripe. You enter your payment details directly with Stripe; they are not visible to us. We receive only what we need to issue your licence and your invoice.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract.

How we share data

We do not sell your data. We share it only with processors bound by a data processing agreement under Art. 28 GDPR, with public authorities where we are legally required to, and otherwise only with your explicit consent.

Transfers outside the EU

Where a processor operates outside the EU, the transfer is safeguarded by the European Commission's standard contractual clauses under Art. 46 GDPR.

Data security

We use TLS encryption for data in transit, role-based access control with multi-factor authentication on our own systems, separated development and production environments, and regular backups.

Your rights

Under the GDPR you have the right to access your data (Art. 15), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20) and to object to processing (Art. 21). You can withdraw consent at any time with effect for the future.

To exercise any of these, write to info@alphabees.de. You also have the right to lodge a complaint with a supervisory authority — for us that is the Berlin Commissioner for Data Protection and Freedom of Information.

Children

Alpha is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We revise this page when our processing changes. The current version is always the one published here.

Contact

See the imprint.