Privacy Policy

Last Updated: January 16, 2026

1. Introduction

Welcome to NeonLightsMedia ("we," "our," or "us"). We take the protection of your personal data very seriously. This Privacy Policy explains how we collect, use, and protect your information when you visit our website (the "Site").

Because we are legally based in Germany but serve a global audience (primarily in the USA), this policy is designed to comply with the EU General Data Protection Regulation (GDPR/DSGVO), the German Telecommunications-Digital-Services-Data-Protection-Act (TDDDG), and applicable US State Privacy Laws (such as CCPA/CPRA).

2. Responsible Data Controller

The party responsible for data processing on this website (Data Controller) within the meaning of the GDPR is:

NeonLightsMedia Joshua Sascha Miguel van den toorn c/o Online-Impressum.de #5600 Europaring 90 53757 Sankt Augustin Germany

Contact: Email: Contact@NeonLightsMedia.com Phone: +49 1514 621 2727

Data Protection Officer (DPO): Due to the size of our company and the nature of our processing activities, we are not legally required to appoint a Data Protection Officer pursuant to Art. 37 GDPR or § 38 BDSG. For privacy concerns, please contact the Controller directly.

3. Data Collection and Technical Hosting

3.1 Hosting (Squarespace)

Our website is hosted by Squarespace Ireland Ltd. (Le Pole House, Ship Street Great, Dublin 8, Ireland). Squarespace collects technical data (log files) when you visit our site, including your IP address, browser type, and operating system.

  • Purpose: To ensure the secure and stable operation of the website.

  • Legal Basis: Art. 6 Para. 1 lit. f GDPR (Legitimate Interest in technical security and functionality).

  • Data Processing Agreement: We have concluded a Data Processing Agreement (AV-Vertrag) with Squarespace to ensure GDPR compliance.

3.2 Content Delivery Network (CDN)

We use a Content Delivery Network (CDN) to load images and code scripts faster. This may involve transmitting your IP address to servers closest to your location.

  • Legal Basis: Art. 6 Para. 1 lit. f GDPR (Legitimate Interest in fast website loading).

3.3 SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" in your browser address bar and the lock icon.

3.4 Cookies and Tracking Technologies

Our website uses "cookies" (small text files stored on your device).

a) Strictly Necessary Cookies These are essential for the website to function (e.g., security, page navigation).

  • Legal Basis: Art. 6 Para. 1 lit. f GDPR (Legitimate Interest) and § 25 Para. 2 No. 2 TDDDG. Consent is not required.

b) Consent-Based Cookies (Analytics & Ads) We use third-party cookies for analytics (Google) and advertising (Raptive). These cookies are only set if you give your explicit consent via our Cookie Banner.

  • Legal Basis: Art. 6 Para. 1 lit. a GDPR (Consent).

  • Withdrawal of Consent: You can withdraw your consent at any time with effect for the future by clicking the "Privacy/Cookie Settings" link in the website footer.

4. Advertising (Raptive)

Advertising Privacy Policy Snippet CMI Marketing, Inc., d/b/a Raptive (“Raptive”) is a service provider of this Site for the purposes of placing advertising on the Site, and Raptive will collect and use certain data for advertising purposes. To learn more about Raptive’s data usage, click here: https://raptive.com/creator-advertising-privacy-statement

  • Legal Basis: Art. 6 Para. 1 lit. a GDPR (Consent). We only load personalized advertising trackers after you have consented via our Consent Management Platform (CMP).

5. Analytics and Performance

Google Analytics 4 (GA4)

We use Google Analytics 4 provided by Google Ireland Limited. GA4 uses cookies to analyze your use of the website.

  • IP Anonymization: We have activated IP anonymization. Your IP address is shortened by Google within the EU/EEA before being transmitted to US servers.

  • Legal Basis: Art. 6 Para. 1 lit. a GDPR (Consent).

  • Data Retention: User-level data is retained for 14 months and then automatically deleted.

  • Opt-Out: You can prevent Google Analytics tracking by not accepting cookies in our banner, or by installing the browser add-on: https://tools.google.com/dlpage/gaoptout

6. Embedded Content (Social Media)

We embed content from third parties (e.g., YouTube videos, posts from X/Twitter, Bluesky, Reddit). By default, we restrict these embeds from loading until you interact with them or have given consent. Once loaded, these third parties receive your IP address and may set their own cookies.

  • Legal Basis: Art. 6 Para. 1 lit. a GDPR (Consent).

  • Note: If you are logged into these platforms (e.g., Google or Reddit) while visiting our site, they may link your visit to your personal profile.

7. Mediavine Grow (Engagement)

We use the "Grow" widget by Mediavine, Inc. to allow features like "Save Post."

  • Data Processing: Mediavine processes your browsing behavior and IP address.

  • Account Holders: If you log into a Grow account, Mediavine is the independent Data Controller for your profile data.

  • Privacy Policy: https://www.mediavine.com/privacy-policy/

8. International Data Transfers

Some of our service providers (Google, Raptive, Squarespace, Mediavine) are based in the USA.

  • EU-US Data Privacy Framework (DPF): Where providers are certified under the DPF (e.g., Google), we rely on this adequacy decision by the EU Commission (Art. 45 GDPR).

  • Standard Contractual Clauses (SCCs): For providers not under the DPF, we have concluded Standard Contractual Clauses to ensure a level of protection equivalent to EU standards (Art. 46 GDPR).

9. Automated Decision-Making

We do not use automated decision-making or profiling (as defined in Art. 22 GDPR) that has legal effects on you.

10. Children's Privacy

Our Site is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you are a parent and believe we have collected data from a child under 16, please contact us for immediate deletion.

11. Your Rights (GDPR)

If you are located in the EU/EEA, you have the following rights regarding your data:

  1. Right to Access (Art. 15 GDPR): Request a copy of your data.

  2. Right to Rectification (Art. 16 GDPR): Correct inaccurate data.

  3. Right to Erasure (Art. 17 GDPR): Request deletion of your data ("Right to be Forgotten").

  4. Right to Restriction (Art. 18 GDPR): Restrict how we process your data.

  5. Right to Data Portability (Art. 20 GDPR): Receive your data in a structured format.

  6. Right to Object (Art. 21 GDPR): Object to processing based on "Legitimate Interest."

  7. Right to Withdraw Consent (Art. 7 Para. 3 GDPR): Withdraw consent at any time (via Cookie Settings).

  8. Right to Complain (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority.

Competent Supervisory Authority for Us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW) Kavalleriestr. 2-4, 40213 Düsseldorf, Germany https://www.ldi.nrw.de

Terms of Service & Legal Clauses

The following clauses govern the use of this Site.

1. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the Federal Republic of Germany, without regard to its conflict of law provisions. Note for EU Consumers: Mandatory consumer protection regulations of the country in which you habitually reside remain unaffected.

2. Binding Arbitration (“Arbitration Agreement”)

(Note: This section is required by our US advertising partners. For consumers residing in the EU, this arbitration clause applies only to the extent permitted by mandatory European consumer protection laws.)

a. Applicability. You agree that any dispute or claim against us, or our vendors (collectively, “We”), related to your use of this website will be resolved by binding arbitration, rather than in court, except for small claims or intellectual property disputes. b. Process. To begin a claim, send a letter to: NeonLightsMedia, c/o Online-Impressum.de #5600, Europaring 90, 53757 Sankt Augustin, Germany. The arbitration will be conducted by JAMS (www.jamsadr.com). c. Waiver of Class Actions. You and We agree that any dispute resolution proceedings will be conducted only on an individual basis and not in a class, consolidated, or representative action. d. Waiver of Jury Trial. You and We waive any right to a jury trial.

3. Consent to Data Collection

These Terms incorporate our Privacy Policy. You hereby consent to the collection and use of data by us and our vendors as described above. You can revoke this consent at any time.

4. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR LOSS OF PROFITS OR DATA. OUR LIABILITY IS LIMITED TO THE GREATER OF THE AMOUNT YOU PAID US IN THE LAST 6 MONTHS OR $100 USD. (German Legal Note: The above limitation does not apply to damages resulting from injury to life, body, or health, or from intentional or grossly negligent breach of duty by us or our legal representatives.)

5. Contact

For any questions regarding this policy or to exercise your rights, please contact: Email: Contact@NeonLightsMedia.com