Skip to content

Privacy Policy

Last updated: 4 October 2026

You can read everything on Climesumer without telling us who you are. This page says what we store when you do more than read, why, and which companies handle it for us.

Who is responsible

Simon Heuschkel, Lohmühlenstraße 65, 12435 Berlin, Germany.
E-mail: climesumer [@] gmail . com. Full contact details are in theimprint.

Visiting the site

The site is hosted by Netlify, Inc. (USA). When your browser requests a page, Netlify processes your IP address, the page requested, the time and your browser type in order to deliver it and to keep the service secure. Images are served from Amazon Web Services (S3, Stockholm region), which sees the same technical data for each image it delivers. We rely on our legitimate interest in running a working, secure website (Art. 6(1)(f) GDPR).

The small "Made by" badge in the corner of the page is loaded from Maker Badge (madebybadge.netlify.app, also hosted by Netlify), which receives the same technical data when your browser fetches it.

Your account

If you sign up we store your e-mail address, a password hash if you set a password, and whatever you add to your profile. We also store what you do with the account: resources you save, upvote or mark as used, your progress on climate actions and Climate Guide lessons, and anything you submit. This is what the account exists to do (Art. 6(1)(b) GDPR). It is kept until you delete the account, which you can do yourself at any time on the delete account page.

Accounts and all site data are stored with Supabase, Inc., in a database in the EU (Ireland). Sign-in, confirmation and welcome e-mails are sent through Plunk.

Newsletter

If you subscribe we store your e-mail address and where on the site you signed up, and use it only to send the newsletter (your consent, Art. 6(1)(a) GDPR). We first send one e-mail asking you to confirm the address; until you follow its link you receive nothing else, and we keep the time you confirmed as the record of your consent. The newsletter is sent through Plunk, which holds your address for that purpose. You can unsubscribe at any time through the link in every issue or by writing to us, and we delete the address.

Forms: feedback, submissions and partnership requests

What you type into a form is stored so we can read and answer it, together with your e-mail address if you give one. Images attached to a submission are stored on Amazon S3 and are not published until an editor has reviewed them. A notification containing the submission is sent to our internal Slack workspace (Slack Technologies, USA). We rely on our legitimate interest in handling what you send us (Art. 6(1)(f) GDPR) and delete it once it is dealt with, unless it became part of a published listing.

Cookies and storage on your device

The site itself sets only what it needs to function:

  • a sign-in cookie that keeps you logged in, set when you log in and removed when you log out;
  • a cookie that marks the installed app, so the app shows its own navigation;
  • your answer to the analytics question, kept in your browser's local storage;
  • a cache of pages for offline use, if you install the app.

None of these is used to track you and none is shared with anyone.

Analytics (only if you agree)

If you choose "Accept" when asked, we use PostHog to see which pages are visited, to record anonymised sessions (text you type is masked) and to show occasional short feedback questions. It helps us find what is broken or confusing. PostHog sets a cookie or local-storage entry to tell visits apart. The data is stored on PostHog's EU servers (Frankfurt) by PostHog, Inc. and is not used for advertising.

Nothing is loaded from PostHog unless you agree (Art. 6(1)(a) GDPR, § 25(1) TDDDG), and you can change your mind at any time.

Videos and links to other sites

Some pages embed videos from YouTube (in its privacy-enhanced mode) or Vimeo. When such a page loads, your browser connects to that provider, which receives your IP address and may set its own cookies once you play the video.

Listings link to the companies and resources they describe. Some of these are referral or affiliate links: if you follow one, the other site can see that you came from Climesumer, and what it does from there is governed by its own privacy policy. We do not pass any information about you to it.

Transfers outside the EU

Netlify, Supabase, Amazon Web Services, Slack and PostHog are US companies or have US parents. Where personal data is transferred to the USA, this is based on the EU–US Data Privacy Framework or on the EU's standard contractual clauses.

Your rights

You have the right to know what we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent you gave, at any time. Write to the address above and we will act on it. You also have the right to complain to a data protection authority; ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Changes

We update this page when what the site does changes. The date at the top says when it last did.