Legal
Privacy policy
Last updated: 18 October 2026. This policy applies to the website appsolut.lol.marketing. Our standalone products have their own privacy policies:
- MeineGBU privacy policy
- Verbandbuch.org privacy policy
- SiGeKo privacy policy
- MyQuickDish privacy policy
Controller and contact
lol.marketing LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA. Contact person: Manuel Streit. For questions about processing or to exercise your rights, write to hello@lol.marketing.
Visiting the website
The website is delivered via Google’s Firebase Hosting. When you visit, technically necessary connection data is processed, in particular IP address, time, requested address, response status and browser and device information. This serves delivery, error analysis and security. Firebase Hosting uses globally distributed infrastructure, so processing is not limited to Germany or the European Union.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure and reliable delivery. Firebase describes a retention of several months for hosting IP data; we do not promise a shorter fixed period.
Fonts and images are loaded directly from this website. No third-party fonts are loaded and there is no embedded calendar booking.
Contact and support requests
When you write to us using a form, we process your name, email address and message and, optionally, company and website. The selected language, the page path (without parameters) and a fixed category are also sent – project enquiry or support, and for support the selected product where applicable. We use these details to answer your request and, where relevant, to prepare a quote.
Server-side processing takes place via Google Cloud Functions in the us-central1 region in the USA. From there, the form data is passed to the email service Brevo (Sendinblue SAS, France), which delivers a notification to the lol.marketing inbox (Brevo privacy policy). Brevo states that its databases are located within the EU; the upstream processing in the USA and further email communication mean that processing is not exclusively European.
A request does not subscribe you to a newsletter and does not require consent to analytics. Requests sent via this website are not passed on to advertising platforms. Please do not send passwords, health information or confidential customer data through the form.
For pre-contractual or contractual requests, Art. 6(1)(b) GDPR applies; otherwise our legitimate interest in communication under Art. 6(1)(f) GDPR. We keep requests and correspondence as long as needed to handle them, answer follow-up questions and, where applicable, perform a contract, and delete them afterwards unless statutory retention duties apply. You can always email us directly instead.
Form protection
To prevent automated requests we use a form field that is invisible to visitors and a server-side limit on repeated requests: at most five attempts per email address and 60 attempts overall within a 15-minute window. For this, a pseudonymous identifier is derived from the normalised email address using a secret key. Only this identifier, counters and timestamps are stored – not your email address in plain text and not your message. We do not evaluate IP addresses for this.
These records receive an expiry time 24 hours after the last permitted attempt. An active automatic deletion rule in the database (Firestore TTL) then removes them; this happens asynchronously, usually within a further day, and not exactly at the expiry time. The legal basis is Art. 6(1)(f) GDPR. If the limit applies, you can still reach us by email.
Your privacy settings
This website has exactly one optional purpose: analytics. It is off by default. Your decision and its time are stored in your browser’s local storage under appsolut-consent and apply for about six months, after which we ask again. If storage is blocked, the decision only applies to the current page. Storing it is necessary for the setting you chose (Section 25(2) no. 2 TDDDG).
You can change your choice at any time:
Google Analytics only with consent
Only if you allow analytics do we load Google Analytics 4 – and only on the address appsolut.lol.marketing. Before that, no analytics script is loaded and nothing is sent to Google. We use the same Analytics property as lol.marketing; events from this website are labelled “software”.
We measure:
page_view– the page viewed, once per page view;generate_lead– a project enquiry after our server has confirmed it was accepted;support_request– an accepted support request with the selected product identifier;product_click– a click on a link to a product website, with the product identifier.
Page addresses are sent without URL parameters or fragments, and only the domain of referring pages. Names, email addresses, companies, websites and message texts are never part of these events. Google signals and ad personalisation are disabled; advertising consent stays denied. A pseudonymous browser identifier, technical browser and device characteristics and an approximate location derived from the connection may be processed. Google states that IP addresses of users from the EU, Switzerland and the UK are discarded before logging; this does not make the data fully anonymous.
The legal bases are your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. The cookies _ga and _ga_… are set for appsolut.lol.marketing and, according to Google, last up to two years. How long Google Analytics keeps event and user data depends on the property settings and Google’s data retention rules.
If you withdraw consent, we stop sending events immediately, set consent at Google to “denied” and delete this website’s accessible analytics cookies. Data already sent is not affected; contact us for access or deletion.
No advertising measurement
This website loads no advertising pixels – not from Meta, OpenAI or any other ad platform – and does not report requests as conversions to advertising services.
Links to other websites
Links to our product websites, to lol.marketing or to other providers are ordinary links. No connection to those websites is made before you click. Their own privacy policies apply there.
Recipients and international processing
Recipients are the people at lol.marketing authorised to handle requests and the hosting, function, database and email services used; with consent, also Google Analytics. lol.marketing LLC is a US company, and these services may process data outside the EEA, in particular in the USA. Google’s data processing terms contain provisions on international transfers including EU standard contractual clauses; Google also uses the EU-US Data Privacy Framework. You can request information on recipients and safeguards at hello@lol.marketing.
Your rights
Where the legal requirements are met, you have the right to access, rectification, erasure, restriction of processing and data portability. You can object to processing based on legitimate interests and withdraw consent for the future. You can also lodge a complaint with a data protection supervisory authority, in particular where you live or work. A message to hello@lol.marketing is enough to start.
Former apps
For former apps we no longer actively present, there is a support page each with the historical information on purpose, permissions and storage locations and a way to contact us. This information comes from earlier product descriptions and has not been technically verified for the current app version.