Privacy Policy

1. Controller

The controller under the EU General Data Protection Regulation (GDPR) is:

Nukipa Labs GmbH
Gunta-Stölzl-Straße 7
80807 Munich, Germany
Privacy email: contact@nukipalabs.com

We have not appointed a statutory data-protection officer. You can reach us about any privacy matter at the email address above.

2. Data we collect when you visit this site

When you visit this site, we automatically collect general information. These server log files include the type of web browser you use, your operating system, the domain name of your internet provider, your IP address and similar data. None of this lets us identify you personally. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating the site securely).

3. Cookies and similar technologies

This site only uses strictly necessary cookies and similar storage. In particular, it sets a single session cookie used by the Nukipa platform (name: nk_sid) that assigns a randomly generated ID to a pseudonymous visit so the same page view isn't counted multiple times. We do not analyse it beyond the visit itself and we do not match it against any third-party data. Legal basis: § 25(2) no. 2 TDDDG (strictly necessary storage). You can disable cookies in your browser; in that case visits may be counted multiple times, but every other feature of the site will keep working.

4. Web analytics via the Nukipa platform

This site runs on Nukipa Labs GmbH's own platform. On every page load, the site's server sends a visit record to our platform endpoint at https://nukipa-staging-gateway.fly.dev/public/v1/signals (the controller and the processor are the same here. The endpoint is operated by Nukipa Labs GmbH).

For each visit we transmit:

• the requested path and the hostname
• the HTTP referer (if sent by your browser)
• your browser's user-agent string
• the IP address of the requesting connection
• the ID of the nk_sid session cookie
• UTM parameters from the URL when present (utm_source, utm_medium, utm_campaign, utm_content)

We also record clicks on call-to-action buttons that carry a marker attribute (data-cta-id). We use this data only to measure reach and to understand how our content performs. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in lightweight audience measurement). The data is retained for up to 24 months and then deleted or fully anonymised.

5. Fonts (self-hosted)

The site uses the Instrument Sans and Instrument Serif typefaces. Both are hosted locally on our servers via next/font at build time and served directly from our own domain when you load a page. No connection is made to any third party (in particular, not to fonts.googleapis.com or fonts.gstatic.com). No IP address is transmitted to Google for fonts.

6. Nukipa feedback widget (pre-launch / review builds only)

Pre-launch and review builds of this site may show an internal feedback widget used to collect comments during the design review. The widget stores any notes you type exclusively in your browser's local storage (key nukipa_feedback_v1). Nothing is sent to our server or to any third party. The widget makes no network requests. In the live production build the widget is disabled.

7. Hosting

This site is hosted with a processor located in the EU. Server log files are kept briefly for technical reasons and deleted after 30 days at the latest. The legal basis is Art. 6(1)(f) GDPR. We have a data-processing agreement with our host under Art. 28 GDPR.

8. Contacting us

If you contact us by email, contact form or chat, we store the information you provide (name, email address, message body) so we can reply. We delete the data once it is no longer needed for that purpose, unless statutory retention rules require otherwise. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR.

9. Your rights

At any time you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw any consent at any time for the future. A short email to the contact address above is enough to exercise these rights.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data-protection authority. Our supervisory authority is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.

11. Changes to this policy

We may update this policy when the law or the site's functionality changes. The version currently in force is the one shown above.

For privacy questions, email contact@nukipalabs.com.
Last updated: 19 May 2026.