Privacy policy

Last updated: 20 September 2026 · Information pursuant to Art. 13 and 14 GDPR

1. Controller

Tobias Westrich
Hochstraße 33
66287 Quierschied, Germany
info@westrich-webdesign.de

No data protection officer has been appointed; the conditions of § 38 BDSG (German Federal Data Protection Act) do not apply.

2. When you visit this website

The website is delivered by Vercel Inc. This produces technically necessary server logs (IP address, time, address requested, browser identifier). The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in secure operation.

Vercel is a US company. The transfer relies on the Standard Contractual Clauses and the EU-US Data Privacy Framework. Delivery happens from servers in the EU where available.

3. Reach measurement

We count which sections of the website and which buttons of the app are used, in order to improve them. The events go through our own server; a third-party script is not loaded — and no cookie is set for this. They are not passed on to anyone: no analytics provider is currently configured.

• No identifier is issued and none is stored.
• Your IP address is not transmitted — it is explicitly set to null before anything is passed on.
• Only what is on a fixed list is ever passed on. The list is in the source code and can be read at /api/messung.

The legal basis is Art. 6(1)(f) GDPR. Since no identifier is stored, no personal reference is created.

4. In the Cueshot app

Your recordings never leave your device. Screenshots, screen recordings, audio recordings and transcripts are created, processed and stored on your Mac — in the folder ~/Library/Application Support/Cueshot/, readable by your user account only. Speech recognition runs on the device too — NVIDIA Parakeet as a Core ML model on your chip — and the text is tidied by rules, not by a cloud service.

One model is downloaded once, on request. When you ask for it in Settings, Cueshot fetches the speech model (Parakeet, about 460 MB) from Hugging Face and keeps it in the folder above. Nothing of yours is sent in that request — it is a download, not an upload — and it happens only when you press the button. Recognition then runs entirely on your Mac.

Exactly two kinds of data leave the app:

In the app's settings, you can view in plain text what is sent — not a description of it, but the actual payload.

5. When you buy something

Nothing, for now. Cueshot is free during early access: there is no account, no payment and no license key, so no payment provider and no customer data. When a paid plan arrives, this section will describe it before the first sale.

6. Your rights

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR), unless a retention obligation applies
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR) — for the usage counts, the switch in the app is enough
• Lodging a complaint with a supervisory authority (Art. 77 GDPR)

The competent supervisory authority for us is the Unabhängiges Datenschutzzentrum Saarland (independent data protection centre of the Saarland), Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Germany, phone +49 681 94781-0, datenschutz.saarland.de. You may also complain to the authority where you live or work.

An email to info@westrich-webdesign.de is enough for any of this.

7. Recipients at a glance

There are no others. Should one be added, it will appear here before it is used.

Vercel processes data on our behalf; a data processing agreement under Art. 28 GDPR is in place with them. We have no customer database of our own.

Stand / last updated: 20 September 2026.

Legal notice