Last updated: November 12, 2026
1. Privacy at a glance
- We set no cookies.
- No visitor statistics, no Google Analytics, no ad trackers, no social media plugins.
- Your chart is calculated entirely in your browser. No accounts, no sign-up.
- Our fonts, images and scripts are hosted on our own server. Your browser does not connect to Google or any other provider for them.
- You only enter your email address if you want your full reading by email (see section 7).
2. Controller
Brainwave Entertainment GmbH
Starhembergstraße 7
4020 Linz, Austria
humandesign-chart.com is a project of Brainwave3D, a brand of Brainwave Entertainment GmbH.
Contact: via the contact form in our Help Center. You'll find all company details in the imprint.
3. Hosting and delivery
Our website runs on a server of Hetzner Online GmbH in Germany. In front of it sits Cloudflare (Cloudflare, Inc., USA), which delivers the site quickly and protects it against attacks. Pages, images, fonts and scripts all load from our own server. To make this work, Cloudflare processes your IP address and technical connection data. Cloudflare is certified under the EU-US Data Privacy Framework.
Cloudflare may ask your browser to report connection errors to Cloudflare (Network Error Logging) and, if it suspects an attack, set a technically necessary security cookie.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation).
4. Server logs
With every request, our server automatically logs: date and time, the address requested, the status code and the amount of data transferred, the referrer URL, and the browser identifier (browser type and version, operating system). Your IP address is not in these logs: all requests come through Cloudflare, so our server only sees the address of the Cloudflare server.
Please note: on the result page, your birth data is part of the address (see section 6). So your birth date, time, place and time zone can appear in these logs as part of the address requested.
The logs are deleted automatically on a regular basis.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation).
5. Fonts
The fonts on this site (Bricolage Grotesque, Figtree, Gochi Hand, DM Mono) are hosted on our own server and load from there. There is no connection to Google or any other font provider.
6. Your chart
Your chart is calculated entirely in your browser. We don't send your birth data to any third party for the calculation.
So you can reload or share your result, your birth date, birth time (if you enter it), birth place and time zone are part of the address of the result page. Like every address you open, it reaches our server (see section 4). If you share the link, the other person sees these details.
To search for your birth place, the site loads a list of places (based on GeoNames) from our own server. The search itself runs in your browser, no third party is involved.
When you reveal your card in the calculator, the site puts one single technical marker (hd-aufdecken) into your browser's session storage (sessionStorage). It contains no personal data, only makes sure the loading screen shows briefly, and is deleted again right away on the result page.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in showing you your chart).
7. Email, full reading and newsletter
On the result page, you can enter your email address to get your full reading. We then send you the 5-day card course by email and the Brainwave3D newsletter.
First you get a short confirmation mail (double opt-in). Only when you click the link in it does your sign-up become active.
For this, we store your email address, your language and the chart details we need for your reading (type, authority, profile and your birth data).
We send the emails through Klaviyo (Klaviyo, Inc., USA). Klaviyo stores these details on our behalf and sends the emails. Klaviyo is certified under the EU-US Data Privacy Framework.
You can unsubscribe at any time through the link in every email or by writing to us through our Help Center.
Legal basis: Art. 6(1)(a) GDPR (your consent). You can withdraw your consent at any time. The withdrawal applies to the future.
8. Contact through the Help Center
If you write to us through the contact form in our Help Center, we process your details and your message only to answer you. We do not pass them on.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in answering inquiries).
9. Links to the Brainwave3D shop
The frequency buttons and the links in the footer lead to the Brainwave3D shop at brainwave3d.com (run on Shopify). These links carry tags (utm parameters), so we can see which order came through this site. Your browser only connects to the shop when you click a link. From then on, the shop's privacy policy applies.
10. Your rights
We process your data in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act. You have the right at any time to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
Objection: Where we process data based on legitimate interests (Art. 6(1)(f) GDPR), you can object at any time. We will then stop processing it unless we can demonstrate compelling legitimate grounds.
Complaints: You can lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Austria, phone +43 1 52 152-0, www.dsb.gv.at.
For any request about your data, a message through our Help Center is all it takes.
11. Data security
All pages are transmitted encrypted (HTTPS). Data transmission over the internet can still have security gaps. Complete protection is not possible.
12. Changes
When our website or the law changes, we update this privacy policy. The current version is always on this page.