Privacy policy
Datenschutzerklärung · as of 1 November 2026
Who is responsible
Bastian Buch c/o GAM
Pappelallee 64
10437 Berlin
Email: hello@gethebel.com
What we store and why
Your account. Your email address, your first name, your goals, language, time zone, send time and the dates you signed up, confirmed and gave consent. We need these to write and send your daily email (Art. 6 (1) (b) GDPR). We only send after you confirm your address by email (double opt-in, Art. 6 (1) (a) GDPR).
How you use the email. Links in the email go through gethebel.com. We record which article you opened, which Hebel you marked as done or saved, notes you add to a Hebel and feedback you give on an issue. We use this to pick better sources for you and to improve Hebel (Art. 6 (1) (b) and (f) GDPR). We do not use tracking pixels and do not record when you open an email.
Newsletters you forward. If you forward newsletters to your personal address at in.gethebel.com, we store their content and use it as a source for your email.
Visiting the website. We use no analytics. We set a single cookie, hebel_session, only after you confirm your email or enter a code we sent you: it keeps you signed in for 90 days so you can change your goals without a new code. It is technically necessary for that and needs no consent (§ 25 (2) TDDDG). Our server keeps no access logs. Your IP address is held only in the server memory to limit sign-up abuse and is never written to disk (Art. 6 (1) (f) GDPR). Fonts are served from our own server.
Who processes data for us
We work with these processors under data processing agreements:
- Hetzner Online GmbH, Germany: hosts the website and the database in Falkenstein, Germany.
- Amazon Web Services EMEA SARL (Amazon SES), Luxembourg: sends the emails from the EU (Ireland) region. Receives your email address and the content of each email.
- Google Ireland Limited (Gemini API): an AI model that reads your goals and first name together with newsletter articles and writes your email. Google does not use this data to train its models.
- Typesafe (Jev API): ranks newsletter passages against your goals. Receives the text of your goals, not your email address.
- Cloudflare, Inc.: runs our DNS and receives the newsletters you forward to in.gethebel.com.
Amazon, Google and Cloudflare are part of US groups. Where data may reach the US, the transfer relies on the EU-US Data Privacy Framework or the EU standard contractual clauses (Art. 45, 46 GDPR).
AI-written content
Your email is written by an AI model from your goals and from articles of public newsletters. Nothing is decided about you with legal or similarly significant effect (Art. 22 GDPR).
How long we keep it
We keep your data as long as you have an account. Unsubscribing stops all emails at once. Write to us and we delete your account and everything linked to it. Backups are overwritten after seven days.
Your rights
You can ask for access to your data, its correction or deletion, restriction of processing and a copy in a portable format, and you can object to processing based on legitimate interest (Art. 15 to 21 GDPR). You can withdraw your consent at any time with the unsubscribe link in every email. A short email to hello@gethebel.com is enough.
You can also complain to a data protection authority, for example the Berliner Beauftragte für Datenschutz und Informationsfreiheit.