Privacy Policy

The data controller responsible for data processing on this website is:

• Art. 6 (1) a GDPR:Consent (e.g., newsletter, sharing matching results)
• Art. 6 (1) b GDPR:Contract fulfillment (account management, matching service)
• Art. 6 (1) c GDPR:Legal obligations (invoice retention)
• Art. 6 (1) f GDPR:Legitimate interests (security, fraud prevention)

We use the following service providers who process data on our behalf:

Data processing agreements pursuant to Art. 28 GDPR or corresponding data protection agreements exist with all service providers that process personal data on our behalf.

Pursuant to Art. 22 GDPR, we inform you about the use of automated decision-making:

Our website uses cookies. We distinguish between:

You can change your cookie settings at any time via the cookie banner or in your browser.

Pursuant to the GDPR, you have the following rights:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)

• Account dataUntil account deletion
• Contact inquiries, content (name, email, phone, message, topics, severity, postcode region)Name, email, phone, message and topic data are stored encrypted (AES-256-GCM). Severity and postcode region are stored only as coarse categories that are not identifying on their own. 30 days after receipt all of these fields are automatically purged from our database by a daily cron job. You can also delete your inquiry yourself at any time via the link in the confirmation email. The email notification that was sent to the therapist at the time of the inquiry is subject to the therapist's professional confidentiality obligation and is not covered by this deletion.
• Contact inquiries, pseudonymized residual data (therapist ID, timestamp, match score, technical status flags)12 months after anonymization; the record is then deleted from the database entirely. Topic, severity and postcode-region data are already removed by the 30-day deletion and are not retained beyond it. The remaining fields still count as pseudonymized pursuant to Art. 4 (5) GDPR.
• Matching session data (wizard answers, if not submitted)12 months after last use
• Billing data7 years (legal retention requirement)
• Server logsVercel Hobby plan: approx. 1 hour; longer accordingly on plan upgrade

For questions about data protection or to exercise your rights, please contact us at:

We will respond to your request within 30 days.