Legal

Privacy policy

In short: this website sets no cookies, embeds no third-party content and uses no analytics or advertising services. That is why there is no consent banner. Fonts are served from our own server. Personal data only arises where you write to us yourself or use the AI assistant. We are a United States company; because this site also addresses visitors in Europe, this policy describes both the rights that European data protection law gives you and the rights available under United States law.

1. Who we are

RETHINK SPACE Inc. (C-Corporation in Formation), Delaware, USA, represented by Dr. Karl Johannes Lierfeld, e-mail contact@rethink.space. For visitors in the European Economic Area, Switzerland and the United Kingdom we are the “controller” within the meaning of the General Data Protection Regulation, because this website is directed at people there. No data protection officer has been appointed; the conditions requiring one are not currently met.

2. Hosting and log files

The website is hosted on GitHub Pages, a service of GitHub Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. When you open a page, GitHub processes technically necessary connection data, in particular IP address, date and time, the address requested, the amount of data transferred and the browser identifier. This processing is required to deliver the pages and to defend against attacks. The legal basis is our legitimate interest in secure and stable operation under Article 6 (1) (f) GDPR. We have no influence on the retention period or scope of these logs; details are given in GitHub’s privacy statement.

3. Storage in your browser

While the site is not yet public, your release for preview access is stored in your browser’s local storage so that you do not have to sign in again. That is a function you trigger yourself and it is strictly necessary for the service you asked for. The entry stays on your device, is never transmitted to us and can be deleted at any time in your browser settings. No cookies are set and nothing is stored for advertising or measurement.

4. Getting in touch

If you send us an e-mail, we process your details to handle the enquiry and any follow-up questions. The contact form sends the same details to our own function at Supabase Inc.; the database and the function run in the Ireland region within the European Union. We store name, e-mail address, message and the time. Your IP address is not stored: only a shortened one-way hash of it, which lets us block abuse without keeping the address itself. A hidden field in the form catches automated submissions; those are discarded and not stored. The legal basis is Article 6 (1) (b) GDPR for contract-related enquiries, otherwise our legitimate interest in replying under (f). We delete enquiries once they are settled, unless statutory retention periods apply.

5. AI assistant

The site offers an assistant that answers questions about the project, the author and his books. It only starts once you open it and send a question. Your question then goes to our function at Supabase Inc.; the database and the function run in the Ireland region within the European Union. From there the question is passed to Anthropic PBC, 548 Market Street, San Francisco, CA 94104, USA, to be answered. We store the language, the question, the answer, the model used and the number of text units processed in order to improve the knowledge base. Your IP address is not stored; it is held in memory for at most ten minutes to enforce a limit on requests per user. The legal basis is our legitimate interest in providing clear information about the project under Article 6 (1) (f) GDPR. Please do not enter personal or confidential data in the chat; the same note appears next to the input field.

6. No analytics, no advertising

We use no reach measurement tools, no profiling and no advertising networks. There is no automated decision-making that produces legal effects concerning you. Fonts, images and scripts are loaded exclusively from our own server; there is no connection to Google Fonts or comparable services.

7. Recipients and international transfers

The only recipients are the service providers named above, acting for us: GitHub for hosting, Supabase for the database and the functions behind the contact form and the assistant, Anthropic for answering chat requests. We are ourselves established in the United States, and GitHub and Anthropic are too; the Supabase database and function run in the Ireland region. Data of visitors from Europe is therefore transferred to the United States. Where a provider is certified under the EU-US Data Privacy Framework, the transfer rests on the European Commission’s adequacy decision; otherwise on standard contractual clauses under Article 46 (2) (c) GDPR. Data is never sold and never passed on for advertising purposes.

8. Retention

Hosting log data is deleted by the provider according to its own periods. We keep chat records for at most twelve months and delete them afterwards, or as soon as the purpose no longer applies. We delete e-mail enquiries once they have been dealt with, unless commercial or tax retention obligations apply.

9. Your rights in Europe

If you are in the European Economic Area, Switzerland or the United Kingdom, you have the right to information about the data stored about you, to rectification, to erasure, to restriction of processing and to data portability. You may object at any time, with effect for the future, to processing based on a legitimate interest. Please write to contact@rethink.space. Independently of this, you have the right to lodge a complaint with a data protection supervisory authority, usually the authority where you live.

10. Your rights in the United States

If you live in California, Colorado, Connecticut, Virginia or another state with a comprehensive privacy law, you may ask us what personal information we hold about you, ask us to correct or delete it, and receive a copy. We do not discriminate against anyone who exercises these rights. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of; we also do not process sensitive personal information. Requests go to contact@rethink.space and we answer them within the periods the applicable law sets. This website is not directed at children under 16 and we do not knowingly collect their data.

11. Changes to this policy

We update this policy when the website or the legal situation changes, for example as soon as the contact form is connected to a delivery service. The version published here applies.

Draft as of 23 September 2026, written for a United States company that addresses European partners. Open points before going live: whether a representative in the European Union under Article 27 GDPR must be appointed, and the review by a lawyer on both sides. This text is not legal advice.