muranu← Back to home

Privacy policy

1. Who is responsible

The controller within the meaning of the GDPR is:

Sascha Riemann LLC
30 N Gould St, Ste R
Sheridan, WY 82801, USA
Email: mail@muranu.io

2. The short version

This site sets no tracking cookies and loads no third-party scripts that profile you. We process personal data only where it is needed to run the site, to answer you, or to hold the call you book. The legal bases we rely on are Art. 6 (1)(a) GDPR (consent), (b) (contract or steps before one), (c) (legal obligation) and (f) (legitimate interest).

3. Hosting and server logs

The site is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA), which processes the data that arises when you open a page on our behalf under a data processing agreement (Art. 28 GDPR). Data may be processed in the United States; for visitors from the EU this transfer rests on the EU-US Data Privacy Framework and standard contractual clauses (Art. 46 GDPR).

Every request is written to a server log that your browser supplies: the page or file requested, date and time, the amount of data transferred, whether the request succeeded, browser type and version, operating system, the referring page and your IP address (usually shortened). The legal basis is Art. 6 (1)(f) GDPR; our legitimate interest is a site that works and stays secure. The hosting provider keeps these logs for a short period and deletes them automatically, unless a security incident requires longer retention.

4. Fonts

The fonts on this site are served from our own hosting. Opening a page does not connect your browser to Google or any other font provider, and no personal data is transmitted to a third party for this purpose.

5. Consent banner

A small banner on your first visit asks whether we may use anything beyond what is strictly necessary. Today nothing on this site needs that consent, so the banner is informational. Your choice is stored only in your own browser (in localStorage, under the key muranu.consent) and never transmitted to us; it exists so we can respect your decision on later visits. No external consent-management platform is involved.

6. Booking a call

When you book an intro call, we process the time you picked, the time zone your browser reports, and the email address you enter. We use them to hold the slot, to send you a confirmation with the join link and a calendar file, and to let you join the video call. Booking runs on our own service; the confirmation email is sent through Resend, Inc. (2261 Market Street #5039, San Francisco, CA 94114, USA) as our processor. The legal basis is Art. 6 (1)(b) GDPR — the steps needed to hold the meeting you asked for.

The video call itself is a direct connection between the browsers of the participants (peer-to-peer). Audio and video do not pass through our servers; our service only carries the signalling needed to set the connection up and, where a direct connection is impossible, a relay that forwards the encrypted stream without being able to read it. Booking records and their delivery log are deleted thirty days after the call has ended.

7. Web analytics (Vercel Web Analytics)

To understand how the site is used we run Vercel Web Analytics by Vercel Inc. (address above). The service works without cookies and builds no cross-device profile. No cookies are set and no persistent personal identifiers are stored; the data collected (page viewed, referrer, approximate region, device and browser type) is evaluated in aggregate only.

Because no cookies or comparable technologies are used, this processing does not require consent and rests on Art. 6 (1)(f) GDPR; our legitimate interest is improving the site for the people who use it. Data may be processed in the United States on the basis described in section 3. Vercel’s own privacy policy is available at vercel.com/legal/privacy-policy.

8. Contacting us

If you email us, we process the details you provide (your address, your message, anything you attach) to handle your request. The message is stored in our mailbox; it is not passed on to anyone beyond the technical act of delivering email. The legal basis is Art. 6 (1)(b) GDPR where your request is aimed at a contract, otherwise Art. 6 (1)(f) GDPR — our legitimate interest in answering you.

9. How long we keep data

We keep personal data only as long as it is needed for the purpose it was collected for, or as long as a statutory retention period requires. After that it is deleted or blocked.

10. Your rights

Under the GDPR you have, in particular, the right to:

You also have the right to lodge a complaint with a data protection supervisory authority about how we process your personal data (Art. 77 GDPR). Residents of US states with their own privacy statutes may have comparable rights; email us and we will honor them.

11. Encryption

This site uses TLS encryption to protect what you send us. You can tell by the “https://” at the start of the address in your browser.

12. Changes to this policy

We update this policy whenever a change in how we process data, or in the law, requires it. The version published on this page is the one that applies.

Last updated: October 2026