Privacy Policy

1. Controller

The controller for this website within the meaning of the GDPR is:

Pascal Misoph
Holbeinstr. 7
01307 Dresden
Germany
Email: hello@pawandsage.com

2. What this website processes

When you visit this website, technical connection data can be processed to deliver the site securely and reliably. This may include the requested URL, date and time, IP address, referrer, browser information, device information, and server log data.

If you join the waitlist, CatPlay processes your email address together with the consent text version, privacy policy version, timestamp, and request source in order to document and manage the waitlist request.

3. Hosting and service providers

This website is hosted on Vercel. Waitlist submissions are processed through Convex. Both providers act as technical service providers for the operation of the website and the waitlist workflow.

The waitlist endpoint currently uses a Convex deployment in the EU West region (Ireland). Depending on the provider setup, support, security operations, or subprocessors, processing may still involve countries outside the EU/EEA. In those cases, transfers must rely on an appropriate legal transfer mechanism.

4. Waitlist emails

CatPlay uses the waitlist only to send product launch updates and early-access information related to CatPlay. The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw that consent at any time with effect for the future by emailing hello@pawandsage.com.

If you withdraw your consent, your waitlist data will no longer be used for email updates and will be deleted unless retention is required for legal defense or another lawful reason.

5. Cookies and similar storage

CatPlay currently does not use analytics cookies, marketing cookies, or third-party tracking technologies on this website.

The website only uses technically necessary storage and similar technologies where required for delivering the service you explicitly request. This includes a local storage entry named catplay_privacy_preferences to remember your privacy banner choice for up to 180 days.

The legal basis for such technically necessary storage is Section 25(2) No. 2 TDDDG. Any related processing of personal data is based on Article 6(1)(f) GDPR, based on the legitimate interest in secure, stable, and user-friendly website operation.

6. Legal bases

The relevant legal bases for processing on this website are:

• Article 6(1)(a) GDPR for waitlist communication based on your consent.
• Article 6(1)(f) GDPR for secure website delivery, abuse prevention, troubleshooting, and technical operation.
• Section 25(2) No. 2 TDDDG for technically necessary storage or access on your device.

7. Retention

Waitlist data is kept until one of the following happens: the waitlist purpose ends, you withdraw your consent, or the data is no longer required for the documented purpose.

Technical log and operational data are retained only for as long as required for security, troubleshooting, and provider-side operational obligations.

The local storage preference for the privacy banner is stored for up to 180 days and is then removed automatically when a new version is required or the stored expiry time has passed.

8. Your rights

Subject to the applicable legal requirements, you have the right to access, rectify, erase, restrict processing, object to processing, and data portability. Where processing is based on consent, you may withdraw your consent at any time with effect for the future.

9. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. If the controller is based in Dresden, the competent authority is generally the Sächsische Datenschutz- und Transparenzbeauftragte, Maternistraße 17, 01067 Dresden, www.datenschutz.sachsen.de .

10. Version of this notice

Privacy notice version: 2026-04-26