Privacy Policy

Manyfold Labs GmbH, Waldweg 16, 23795 Bad Segeberg, Germany, is responsible for processing personal data on Max Layer (maxlayer.org). Contact: max@manyfoldlabs.com.

Browsing generates technical request data, including IP address, browser and device information, requested pages and timestamps. Hosting and security providers may process this information to deliver and protect the site.

If you create an account, we process your name, email address, authentication information and profile details you provide. If you use an external sign-in provider, we receive the information it shares to authenticate you. Learning features may store enrolments, lesson progress, quiz results, achievements and certificates.

We process messages you send us. If you use the AI chat, your messages and relevant conversation context are processed to generate responses and may be stored with your account. Do not include confidential information or sensitive personal data in chat.

We process account information and learning activity to provide the services you request (Article 6(1)(b) GDPR). We process technical data to operate, secure and troubleshoot the website based on our legitimate interests (Article 6(1)(f) GDPR).

We process data where necessary to comply with legal obligations (Article 6(1)(c) GDPR). Where an optional feature requires consent, the basis is Article 6(1)(a) GDPR. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

The platform uses infrastructure and service providers for hosting (Vercel), database storage (Neon) and email delivery (Resend). Providers receive the information needed for their services. Authentication providers process sign-in requests when you choose that method.

When you use AI features, requests may be sent to the configured AI service provider. External videos, notebooks and linked websites are subject to their providers’ privacy practices; opening or loading them may disclose technical request data. We do not treat a link to a social profile as consent to tracking.

Cookies and browser storage support authentication and preferences. Our Cookie Policy explains these uses. Google Analytics is currently disabled in the application.

Vercel Web Analytics can be enabled through the deployment configuration to measure aggregate usage. Hosting logs and operational records may still be processed even when usage analytics is disabled. Optional technologies requiring consent must not be enabled before that consent is obtained.

We retain personal data for as long as needed to provide the requested service, maintain security or satisfy applicable legal obligations. Account and learning records are normally retained while the account is in use. Deletion requests are assessed against any legal retention requirements; backup copies may remain until their normal expiry.

Providers may process data outside the European Economic Area. Where GDPR transfer restrictions apply, transfers require an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses. Contact us for information about the providers and safeguards relevant to your data.

Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction or portability of your personal data. You may object to processing based on legitimate interests and withdraw consent where processing relies on it.

Send requests to max@manyfoldlabs.com. You may also complain to a data protection supervisory authority, including the authority in your place of residence or the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein.

We will update this notice when our services or data practices change. The date above identifies the latest version. Material changes will be communicated as required by law.