Privacy Policy

Controller

Ugurlabs UG (haftungsbeschränkt)
Fährstraße 217
40221 Düsseldorf
Germany
Email: support@ugurlabs.com

Scope of This Policy

This policy explains how we process personal data when you use ugurlabs.com. You can browse the public website without an account. An account is required only for protected features, including applying to and participating in the UgurLabs Fellowship.

The more detailed Fellowship Privacy Notice applies in addition to this policy when you create a Fellowship account, apply, submit published work, or participate in a recognition round.

Website Delivery and Security

The website is hosted by Vercel Inc., United States. When your device requests a page, Vercel processes technical connection data such as the IP address, requested URL, browser and device information, referring page, timestamps, and diagnostic or security events. This processing is necessary to deliver the website and is based on our legitimate interests in providing a secure, reliable service and preventing misuse (Art. 6(1)(f) GDPR).

Technical logs are retained according to the limits of our hosting plan and only longer when needed to investigate a security or reliability incident. See the Vercel Privacy Policy and Data Processing Addendum.

Accounts and Authentication

We use Clerk, Inc., United States, to create accounts, verify email addresses, authenticate users, maintain sessions, and protect restricted pages. Clerk processes identifiers, verified email addresses, profile information you provide, authentication credentials or one-time-code events, session information, and security signals. UgurLabs receives your Clerk user ID, verified email address, and display name; we do not receive your plain-text password.

Authentication required to apply for or administer the Fellowship is processed to take steps at your request and operate the program relationship (Art. 6(1)(b) GDPR). Security and abuse-prevention processing is based on our legitimate interests (Art. 6(1)(f) GDPR). Account data is kept while your account exists and is handled after deletion as described in the Fellowship Privacy Notice. See the Clerk Privacy Policy and Data Processing Addendum.

Analytics With Plausible

We use Plausible Analytics, operated by Plausible Insights OÜ, Estonia, to understand aggregate website usage. Plausible does not use analytics cookies or create persistent cross-site profiles. Request data is reduced to aggregate statistics, and IP addresses are not retained in the analytics reports available to us. The legal basis is our legitimate interest in understanding and improving the website (Art. 6(1)(f) GDPR). More information is available in Plausible's data policy.

Cookies and Local Storage

Clerk uses cookies or comparable browser storage that are necessary to provide sign-in, session continuity, and account security. We also store your light or dark theme preference in local storage. These technologies provide features you request and are not used by UgurLabs for advertising or cross-site tracking. Strictly necessary storage is used under Section 25(2) TDDDG; it does not require a consent banner. If we add non-essential browser storage in the future, we will request consent before using it.

Service Providers and International Transfers

We give service providers access only where needed to operate the website and protected features. Our current providers include Vercel for hosting, Clerk for authentication, Supabase for the Fellowship database, and Resend when transactional Fellowship email is enabled. We do not sell personal data or provide it to advertising networks.

Some providers and their subprocessors operate outside the European Economic Area. Where required, transfers are protected by an applicable adequacy decision, including the EU-U.S. Data Privacy Framework for certified recipients, and/or the European Commission's Standard Contractual Clauses. The Fellowship Privacy Notice identifies the provider roles and database region in more detail.

External Links

The website links to third-party sites such as GitHub, YouTube, personal blogs, and individual project websites. Data is sent to those providers only after you follow a link or interact with their content. Their own privacy policies then apply.

Your Rights

Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction of processing, and data portability. You may object at any time to processing based on Art. 6(1)(f) GDPR for reasons arising from your particular situation. To exercise a right, email support@ugurlabs.com. We may need to verify your identity before acting on a request.

Right to Complain

You may lodge a complaint with a data protection supervisory authority. The authority responsible for our establishment is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia.

Changes to This Policy

We update this policy when our services or legal obligations change. The date above identifies the current version. Material changes affecting Fellowship participants will also be communicated through the authenticated website or a transactional notification.