Last updated 2026-10-16. This is a plain-language notice, not a law-firm opinion. Have it reviewed before the public launch.
Who is responsible
Andreas Gesellmann, Softwareberatung und -entwicklung, Österreich. Email hello@bodycommit.com. Postal address: Mida Huberstrasse 54, 7212 Forchtenstein, Österreich. No data protection officer is appointed. Privacy requests go to that email.
The extension
BodyCommit for VS Code and Cursor keeps routines, skips, streaks, minutes, and the daily summary on your machine. That history is not sent to this website and does not require an account.
Waitlist
If you join the waitlist, we process your email address, the time you consented, the page source, and whether you have confirmed. The legal basis is consent (Art. 6 (1) (a) GDPR). The checkbox starts unchecked.
Buttondown is the newsletter provider. When BUTTONDOWN_API_KEY is set, the address is sent to Buttondown, which emails a confirmation link. An address is subscribed only after that link is opened. We do not mark the subscriber as already confirmed. A tag is sent only if BUTTONDOWN_TAG is set. That variable is off by default, because tags are a paid Buttondown add-on.
When the API key is absent, the address is stored in a file on the server that received the form, and the confirmation link is shown on the page so the double opt-in step still works. That file is a setup fallback, not the long-term list.
We keep the address until you unsubscribe or ask us to delete it. Withdrawal of consent does not affect processing that already happened.
Remove an email
Sponsor notes
The sponsor form stores your name, email, optional organization, message, and the time you consented, so the operator can reply. The basis is consent (Art. 6 (1) (a) GDPR). Notes live in a file on the server. You can ask for deletion at hello@bodycommit.com.
Cookies and analytics
This site does not set tracking cookies. A cookieless, Plausible-compatible script loads only when NEXT_PUBLIC_PLAUSIBLE_DOMAIN is set at build time. It is off unless that flag is present. It is not a cookie, and the site does not show a consent banner for it. A banner would be required before any cookie-based tracker.
Hosting and logs
The site is built to run on Vercel. The host may log IP address, user agent, and the URL you requested, for security and operations, then delete those logs on its schedule. The basis is legitimate interest in keeping the site available (Art. 6 (1) (f) GDPR). Vercel may process data in the United States. Transfers outside the EEA rely on the host's safeguards under Art. 46 GDPR.
When Buttondown is configured, Buttondown is a processor for the waitlist. Their confirmation email is how double opt-in is delivered.
Your rights
The GDPR and the Austrian Data Protection Act (Datenschutzgesetz, DSG) apply. You can ask for access, correction, deletion, restriction, and a copy of your data, and you can object to processing based on legitimate interest. You can withdraw consent at any time. Email hello@bodycommit.com. You can lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb@dsb.gv.at, dsb.gv.at), or with the authority in the EU member state where you live.
Providing an email is optional. The extension works without this website. The waitlist is only how you hear about the install link.