Start for free

Privacy Policy

Last updated: September 2026

This is a courtesy translation. The German version is legally binding.

1. Data Controller

Hoser & Giessler GbR
Marcobrunnerstraße 4, 65197 Wiesbaden
Email: kontakt@scalemaker.de

2. Principle: Your files are not stored

Images and videos that you upload for labeling are used exclusively for processing and are deleted immediately after the result is returned. Images are processed transiently in memory. Larger videos are briefly placed in temporary storage (Vercel Blob) for processing and are deleted immediately afterward. There is no permanent storage of your image or video files on our servers. No content-based evaluation of any kind takes place.

3. Processing When You Use the Service

a) Uploaded Files

Legal basis: Art. 6 (1)(b) GDPR (performance of the usage agreement) or (f) (legitimate interest in providing the service). Purpose: applying the label you chose. Retention period: only for the duration of processing.

b) Templates, Custom Icons & Labeling Register (Pro only)

In the paid plan, you can create templates, custom icons and a labeling register. This data is stored linked to your account so that you can reuse it and export it as proof. Legal basis: Art. 6 (1)(b) GDPR.

c) Server Log Files

When you access the service, technically necessary access data (IP address, time, requested resource, status code) is processed by our hosting provider to ensure operation and security. Legal basis: Art. 6 (1)(f) GDPR.

d) Unlocking Premium Features & Contact

To unlock premium features (e.g. video labeling, verification, watermarking) we ask for your first name, last name and email address; when you use a personal email provider, we additionally ask for your company domain, while the phone number is optional. We use this information to unlock your access, associate you with your company and contact you at your request. The legal basis is your consent pursuant to Art. 6 (1)(a) GDPR, which you give via the checkbox in the form and can withdraw at any time with effect for the future; the lawfulness of processing carried out until then remains unaffected. We store this data in our CRM system Attio (Attio, Inc., USA), with which a data processing agreement pursuant to Art. 28 GDPR is in place; a company entry may also be created based on your email domain or the company domain you provide. Any transfer to the USA is safeguarded by the EU standard contractual clauses, which form part of the data processing agreement. We keep the data until you withdraw your consent or request deletion and delete it afterwards. If you additionally tick the optional box for our newsletter, we note your interest; no newsletter is currently sent. Before any dispatch, we obtain separate consent via the double opt-in procedure.

4. Hosting

The service is hosted by Vercel Inc. We have a data processing agreement with the provider pursuant to Art. 28 GDPR. Any transfer of data to the USA is safeguarded by appropriate guarantees (EU standard contractual clauses or the Data Privacy Framework).

5. Cookies & Traffic Measurement

We use technically necessary storage in your browser (for example your language and design settings as well as your cookie decision in localStorage). For anonymous traffic measurement we use Vercel Web Analytics, a cookie-free method that does not create cross-device profiles and does not process personal data for advertising purposes; consent is not required for this.

Overview of the storage we use

Google Analytics 4 (only with your consent)

If you consent in the cookie notice, we additionally use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies and helps us understand how the site is used (for example pages visited, approximate region, device used). Without your consent, Google Analytics is not loaded, so no data is transmitted to Google. The legal basis is your consent pursuant to Art. 6 (1)(a) GDPR. Any transfer of data to the USA is safeguarded by appropriate guarantees (EU standard contractual clauses or the EU US Data Privacy Framework).

Microsoft Clarity (only with your consent)

Also only after your consent, we use Microsoft Clarity, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity helps us understand, using anonymized usage statistics and aggregated heatmaps, how the site is used, so that we can improve it. Cookies are set in the process. Without your consent, Clarity is not loaded. The legal basis is your consent pursuant to Art. 6 (1)(a) GDPR; any transfer of data to the USA is safeguarded by appropriate guarantees.

Google Tag Manager (only with your consent)

To deliver the statistics services listed above, we use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager itself does not create any user profiles, it only manages the loading of tags you have consented to. Without your consent, the Tag Manager is not loaded. The legal basis is your consent pursuant to Art. 6 (1)(a) GDPR.

You can allow or decline the Statistics & Analytics category and revoke or change your consent at any time with effect for the future, by clicking Cookie settings in the footer. Every decision is logged server-side in a data-minimal and pseudonymous manner for verification purposes (Art. 7 (1) GDPR). No advertising tracking takes place.

6. Your Rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You also have the right to lodge a complaint with a supervisory authority. Please contact kontakt@scalemaker.de.

7. Changes

We update this privacy policy whenever the legal situation or the scope of functionality changes. The version published here at any given time applies.