Privacy Policy

Last updated 13 July 2026.

This explains what we do with your personal data when you use MochiLaunch. It is written to be read, not to be survived. The short version: we collect the little we need to deliver your submissions, we do not run analytics or advertising trackers, and we never sell anything about you.

Controller

Devkonic GmbH, Schützenweg 17, 83670 Bad Heilbrunn, Germany. Contact: d@devkonic.com. Full details are in our Legal Notice.

What we collect and why

• Your email address — when you buy, join the waitlist, or sign in to the customer portal. It identifies your order, unlocks the portal, and is how we send your intake form and report.
• Purchase data— the package you bought, the amount, and Stripe's payment identifiers. Card details go straight to Stripe; we never see or store them.
• Intake data — your product name, URL, tagline, description, keywords, and any logo or screenshot you upload. This is the material we submit to directories, so by design it leaves our systems.
• Domain Rating history— we periodically look up the Domain Rating of your product's domain so the portal can chart it.
• Server logs — standard request logs including IP address, kept briefly for security and debugging.

Legal bases

Purchase, intake, portal and DR data: Art. 6 (1) (b) GDPR — necessary to perform the contract you bought. Waitlist emails: Art. 6 (1) (a) GDPR — your consent, withdrawable at any time. Server logs and abuse prevention: Art. 6 (1) (f) GDPR — our legitimate interest in a working, secure site. Invoices and payment records: Art. 6 (1) (c) GDPR — statutory retention duties.

Cookies

One cookie, portal_email, remembers the email you signed in with so /portal and /intake stay unlocked. It is strictly necessary, so it needs no consent banner. There are no analytics, advertising or tracking cookies on this site.

Who else processes your data

We use a small number of providers, each under a data processing agreement and only for the purpose listed:

• Stripe — payments and checkout (they are an independent controller for the payment itself).
• Neon — the database holding orders and intake data.
• Resend — transactional email (confirmation, intake link, report).
• Cloudflare R2 — storage for logos and screenshots you upload.
• Ahrefs — Domain Rating lookups; we send your product domain, nothing else.
• Google (Gemini) — helps us shortlist directories from your product description. Do not put personal data in the description fields if you would rather it were not processed this way.
• Our hosting provider — runs the site and processes server logs.
• The directories themselves — the submission is the service. Your product details, and usually a contact email, are sent to each directory we submit to, and each one then handles that data under its own privacy policy.

Transfers outside the EU

Some of these providers process data in the United States. Those transfers rely on the EU Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. Directories you are submitted to may be based anywhere; that is inherent in asking us to list you on them.

How long we keep it

Order and invoice records: ten years, as German tax and commercial law requires. Intake data and DR history: for as long as we may need to re-check the work, then deleted on request. Waitlist emails: until you unsubscribe or we retire the list. Server logs: a few weeks.

Your rights

You can ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable format (Art. 15–21 GDPR). Where we rely on consent, you can withdraw it at any time without affecting what we did beforehand. One email to d@devkonic.com is enough — no forms. You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work.

Note that we cannot pull your product back out of a directory once it is listed — you will need to ask that directory directly, and we will tell you which ones we submitted to.

Automated decisions

We use AI to help shortlist directories, but a human reviews the list and makes every submission. No decision with legal effect on you is made automatically.

Changes

If we add a provider or change what we collect, we will update this page and the date at the top.