Privacy Policy

This policy explains what data we collect through the BenchMate marketing website (getbenchmate.com) and the BenchMate mobile app, why we collect it, who processes it, and how you can control it. We aim for plain English, not legalese.

The in-app privacy policy bundled with the BenchMate app is the canonical source for app-side disclosures. This page is a superset: it repeats the app disclosures and adds the website-only trackers. If you ever spot a contradiction, the in-app policy wins and we will fix this page.

Who we are

BenchMate is developed and maintained by campusready GmbH ("we", "us", "our"). We are the data controller within the meaning of Art. 4 No. 7 GDPR for all data processed through this website and through the BenchMate app. Full legal contact details are listed at the end of this document.

Quick summary

  • This website uses two analytics tools: Google Analytics 4 (only after you opt in via the cookie banner) and Plausible Analytics (cookieless, no personal data).
  • The BenchMate app uses Firebase Analytics only (no Crashlytics, no push messaging, no remote config). It is off by default until you opt in under Settings → Privacy.
  • Hosting is provided by Vercel Inc. in the United States.
  • No accounts, no payments, no marketing emails are processed through this website.

Marketing website analytics

Google Analytics 4 (consent-gated)

We use Google Analytics 4 ("GA4") to understand which pages of this website are useful to visitors. The GA4 script is not loaded until you give explicit consent through the cookie banner; if you decline, or if your browser sends a Do Not Track signal, GA4 never runs and no GA cookies are set.

  • Provider: Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland) as EU controller, with onward processing by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) acting as a data processor on our behalf.
  • Purpose: aggregate measurement of site usage (page views, referrers, device class).
  • Legal basis: your consent under Art. 6(1)(a) GDPR.
  • Data categories: truncated/anonymised IP address (GA4 truncates IPs in the EU before storage and never logs them to reports), page paths, referrer, screen resolution, device class, coarse geography (country/region), and a randomly generated client ID stored in cookies.
  • Retention: 14 months, after which event-level data is automatically deleted; aggregated reports remain.
  • Opt-out: click Cookie settings in the footer of any page to revoke consent, or clear the bm_consent entry from your browser's localStorage.
  • More information: policies.google.com/privacy.

Plausible Analytics (cookieless)

Plausible is a privacy-friendly analytics product that runs alongside GA4. It does not use cookies, does not collect personal data, and does not require consent.

  • Provider: Plausible Insights OÜ (Västriku 2, 50403 Tartu, Estonia).
  • Purpose: privacy-friendly aggregate site analytics (page views, referrers).
  • Legal basis: our legitimate interest in measuring website usage under Art. 6(1)(f) GDPR. Plausible is genuinely anonymous: it does not set cookies, does not use cross-site identifiers, and does not store IP addresses or any other personal data.
  • How anonymity is achieved: visitor IPs are processed transiently to derive a daily, site-specific hash for de-duplication, then discarded; the hash is rotated daily and cannot be linked back to an individual.
  • Hosting: entirely within the European Union; no transfer to third countries.
  • More information: plausible.io/data-policy.

Cookies and local storage

The website uses the following cookies and local storage entries:

  • _ga — Google Analytics, used to distinguish visitors. Lifetime: ~2 years. Only set if you accept analytics in the consent banner.
  • _ga_<container> — Google Analytics, used to persist session state. Lifetime: ~2 years. Only set if you accept analytics in the consent banner.
  • bm_consent — our own record of your consent decision, stored in browser localStorage (not strictly a cookie, listed here for completeness). Lifetime: indefinite until you clear it. We use this to remember your choice so we don't re-prompt on every page load.

Plausible does not set any cookies.

BenchMate mobile app

The BenchMate Flutter app collects anonymous usage analytics only when you opt in. We do not collect any personally identifiable information, location, contacts, or device identifiers from the app.

Firebase Analytics (the only tracker in the app)

We use Firebase Analytics to understand how the app is used so we can improve it. The app uses only Firebase Analytics — it does not include Firebase Crashlytics, Cloud Messaging, Remote Config, or any other Firebase product.

  • Provider: Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland) as EU controller, with processing by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as our data processor.
  • What is collected: screen views (which screens you visit) and feature-usage events (e.g. starting a timer, creating a note). No name, email, location, device identifier, or other identifying data.
  • Legal basis: your consent under Art. 6(1)(a) GDPR. Analytics is off by default on first launch.
  • Retention: 14 months in Firebase Analytics. After this period, individual event data is automatically deleted; aggregated reports remain.
  • Opt-out: open BenchMate, go to Settings → Privacy, and toggle the analytics switch off. Collection stops immediately.
  • More information: policies.google.com/privacy.

Hosting

This website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). Vercel acts as our processor under Art. 28 GDPR.

  • Purpose: web hosting and edge content delivery for getbenchmate.com.
  • Data processed: standard server access logs (IP address, user-agent string, timestamp, requested URL, HTTP status, referrer) for the technical purpose of serving the site, detecting abuse, and ensuring stability.
  • Legal basis: our legitimate interest in operating a stable, secure website under Art. 6(1)(f) GDPR.
  • Retention: Vercel's standard access-log retention; we do not export or analyse these logs ourselves.
  • Transfer basis: EU-US Data Privacy Framework (Vercel self-certified) plus Standard Contractual Clauses as a fallback. See the next section.

International data transfers

Some of our processors are based in the United States. Where a transfer to a third country occurs, it relies on the following safeguards:

  • Google LLC (GA4 + Firebase Analytics) — self-certified under the EU-US Data Privacy Framework, with EU Standard Contractual Clauses as a fallback safeguard.
  • Vercel Inc. (hosting) — self-certified under the EU-US Data Privacy Framework, with EU Standard Contractual Clauses as a fallback safeguard.
  • Plausible Insights OÜ (analytics) — operates entirely within the European Union (Estonia). No third-country transfer applies.

You can verify each provider's DPF status at dataprivacyframework.gov.

Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you (Art. 15 GDPR).
  • Rectification of inaccurate data (Art. 16 GDPR).
  • Erasure of your data (Art. 17 GDPR), unless a legal retention obligation prevents it.
  • Restriction of processing (Art. 18 GDPR).
  • Data portability in a machine-readable format (Art. 20 GDPR).
  • Object to processing based on legitimate interest (Art. 21 GDPR), including against Plausible analytics on this site.
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
  • Lodge a complaint with your local data protection supervisory authority. In Germany, our lead authority is the Bayerisches Landesamt für Datenschutzaufsicht.

How to exercise your rights

  • Website analytics: click Cookie settings in the footer of any page to change your consent. To fully reset, clear your browser cookies and the bm_consent entry in localStorage for getbenchmate.com.
  • App analytics: open BenchMate, go to Settings → Privacy, and toggle the analytics switch off. Collection stops immediately.
  • All other requests (access, deletion, correction, portability, complaint): email info@campusready.de. We respond within 30 days.

Data security

Traffic between your browser and our servers is transmitted over TLS (HTTPS). We rely on the technical and organisational security measures of our processors (Google, Vercel, Plausible), each of whom is contractually bound under Art. 28 GDPR.

Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Changes to this policy

We may update this policy when our processing changes (for example, if we add or remove a tracker). The current version always lives at this URL, and the in-app version is available under Settings → Privacy Statement. Significant changes that affect what data is collected will be flagged through an in-app notice.

Imprint / legal contact

In accordance with Art. 13 GDPR and § 5 TMG (German Telemedia Act):

campusready GmbH
Pommernstrasse 12a
82327 Tutzing
Germany
Represented by: Kilian Hann
Commercial Register: Munich, HRB 202866
VAT ID (§ 27a UStG): DE287599558
Email: info@campusready.de

Last updated: 2026-05-01

← Back to Homepage