Privacy policy

Last updated: October 2026 · Deutsche Fassung (the German version is authoritative)

In short

1. Controller

Michael Kraus
Am Kobelgraben 14b
86356 Neusäß
Germany

Email: support@mindmaniax.de

This policy covers the website mindmaniax.de and the apps and web services of the Mindmaniax brand (HARDMIX, PRESENTIX, Pop Pals).

2. Hosting and server logs

This website and our web services run on Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you open a page, Cloudflare processes technically necessary data: your IP address, date and time, the requested address, the amount of data transferred, and your browser and operating system. This is needed to deliver the page and protect it against attacks.

Legal basis: our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR). Cloudflare acts as our processor; it is certified under the EU-US Data Privacy Framework, and the EU Standard Contractual Clauses also apply. We do not analyse this data and keep no visitor statistics. More: Cloudflare privacy policy.

3. No cookies, no tracking

mindmaniax.de sets no cookies – with one exception: during the test phase, Cloudflare Access protects the game at poppals.mindmaniax.de and sets a technically necessary cookie for this (see section 8). It uses no analytics, advertising or social media services. Fonts and images are loaded from our own server. Once you follow a link to another website, that website's rules apply.

4. Contact by email

Emails to support@mindmaniax.de are delivered to our inbox through Cloudflare's forwarding service. We use your address and message only to reply, and delete them once the request is settled and no legal retention obligation applies. Legal basis: Art. 6(1)(b) and (f) GDPR.

On this website and in our apps, especially PRESENTIX, links to online shops may be affiliate links. They are marked as “Anzeige” (advertisement). If you buy something through such a link, the retailer pays us a commission. The price does not change for you.

So that the retailer can attribute the commission, the link contains a partner ID. When you click it, this ID is passed to the retailer or affiliate network, which may store a cookie or similar identifier on its own site – not on ours. Whether cookies are set there is decided by the retailer or network, which usually asks for your consent.

We receive no data that identifies you personally from our partners – only aggregated figures such as clicks, products sold and commission earned.

We take part in, or are applying to, these programmes:

Legal basis for including affiliate links: our legitimate interest in funding our free services (Art. 6(1)(f) GDPR).

6. PRESENTIX (AI gift finder)

PRESENTIX is a website that uses artificial intelligence to find gift ideas. It is in private testing and can only be used with a password.

What you enter

You answer questions about the person receiving the gift and the occasion (e.g. relationship, approximate age, interests, occasion, budget, wishes and exclusions; a first name is optional), plus the direction you choose and your ratings (👍/👎).

Please do not enter full names or sensitive information (e.g. about health, religion or political views) about the recipient. A nickname or no name at all is enough.

Processing by Anthropic (Claude)

Your input is sent via our server at Cloudflare to the AI provider Anthropic. Our contracting party is Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland; the data is also processed by Anthropic, PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA. There, the AI model “Claude” creates the suggestions and runs web searches derived from your input; the searches are carried out through Anthropic. Your IP address is not passed to Anthropic, only the content of your input.

Anthropic processes the data as our processor under its Commercial Terms and Data Processing Addendum. Transfers to the USA are covered by the safeguards agreed there, in particular the EU Standard Contractual Clauses. Under these terms, Anthropic does not use our content to train its models. More: Commercial Terms and Anthropic privacy policy.

What we store

Our server does not store your input or the results; it only passes them on. Your browser keeps your last answers and the access password in local storage so you don't have to re-enter them. This stays on your device; you can remove it by clearing this site's data in your browser.

Link checks and product images

Before a suggestion is shown, our server opens the shop's product page once to check that it works and to find the preview image. No data about you is sent. Product images are loaded by your browser directly from the shop's server, so the shop receives your IP address and browser details, as with any image request. When you click “Zum Shop”, you leave PRESENTIX and the shop's rules apply.

Legal basis

The processing is necessary to provide you with suggestions (Art. 6(1)(b) GDPR). For information about the recipient, we rely on our legitimate interest in helping you find a gift (Art. 6(1)(f) GDPR) – which is why we ask you to share as little about them as possible.

About AI results

Suggestions are generated automatically by an AI and may be unsuitable, outdated or wrong. Only the price and details shown by the shop are binding. No decision with legal effect about you is made.

7. HARDMIX (cocktail app)

iPhone app

The app does not collect any personal data. It has no ads, no analytics or tracking tools and no user account, and it sends nothing to us or to third parties. Favourites, ratings, notes and your bottles are stored only on your device and are deleted with the app; they may be part of your device backup with Apple. Purchases, downloads and updates are handled by Apple's App Store under Apple's own terms. We only receive aggregated sales figures from Apple.

Web app (test version)

For a transition period, HARDMIX is also available as a web app. What you enter there (e.g. your own cocktails, ratings, photos) is kept only in your browser's local storage, not with us. Cloudflare processes the technical data described in section 2. Fonts and images are served from our own server; nothing is loaded from Google or other third parties.

Website hardmix.de

The website hardmix.de is also run on Cloudflare (see section 2). It sets no cookies, loads nothing from third parties and embeds no videos. Links to YouTube, Instagram and, later, the shop lead to those providers’ sites, where their privacy policies apply. The shop for HARDMIX clothing is operated by Spreadshirt GmbH, which is the seller and controller for it.

8. Pop Pals (browser game)

Pop Pals is a game you play directly in your browser at poppals.mindmaniax.de. There are no ads, no analytics and no tracking. If you play alone, nothing is sent to us.

On your device the game keeps your settings, your progress and a randomly generated identifier in your browser's storage. The identifier links you to your leaderboard entry; it says nothing about who you are. You can remove this data by clearing the site data in your browser or by choosing Profile → Delete account in the game.

On our game server (poppals-server.mindmaniax.de) data is processed only when you play with someone else and for the leaderboard:

The legal basis is providing the game you want to use (Art. 6(1)(b) GDPR). The server is located in Germany and operated on our behalf by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, as a processor.

Voice chat: Only with friends you invited yourself by code or link, never with strangers. It is off until you switch it on. Your browser asks for the microphone only when you first use the talk button. Your voice is distorted on your own device, passed live through the game server to your partner and never recorded – neither on your device nor on the server.

Access protection during testing: Until the game is public, only people whose e-mail address we have approved can get in. We use Cloudflare Access by Cloudflare, Inc.: you enter your e-mail address, Cloudflare sends you a one-time code and, after you sign in, sets a technically necessary cookie ("CF_Authorization") so you are not asked again on every visit. The legal basis is our legitimate interest in making the game available only to selected people before release (Art. 6(1)(f) GDPR). For hosting by Cloudflare see section 2.

Deleting your account: in the game under Profile → Delete account. This removes your account and leaderboard entries from the server and the data in your browser. You do not need to contact us for this.

Purchases: There are none in the browser version. The full version is offered through the App Store and Google Play; the privacy policy of the respective app applies there.

Pop Pals is intended for people aged 13 and over.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we rely on legitimate interests, you may object (Art. 21). Just write to support@mindmaniax.de.

You may also complain to a data protection authority, for example the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

10. Changes

When our services change, we update this policy. The version published here applies.