Privacy Policy

Last updated: February 2026

CubeWorks GmbH ("we", "us", or "our") operates the Halo Terminal website and sells the Halo Terminal hardware device. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our website and make purchases.

1. Data Controller

2. Data We Collect

2.1 Order Information

When you make a purchase, we collect:

• Name and shipping address
• Email address
• Phone number (if provided)
• Payment information (processed securely by Stripe)

2.2 Technical Data

When you visit our website, we may collect:

• IP address
• Browser type and version
• Pages visited and time spent

2.3 Communication Data

If you contact us for support, we collect the content of your messages and your contact details.

3. How We Use Your Data

We use your personal data to:

• Process and fulfill your orders
• Send order confirmations and shipping updates
• Provide customer support
• Comply with legal obligations (tax records, etc.)
• Send product updates (only if you opted in)

4. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract performance — To fulfill your order (Art. 6(1)(b) GDPR)
• Legal obligation — To comply with tax and accounting laws (Art. 6(1)(c) GDPR)
• Consent — For marketing communications, if you opted in (Art. 6(1)(a) GDPR)
• Legitimate interest — To improve our website and prevent fraud (Art. 6(1)(f) GDPR)

5. Third-Party Services

5.1 Stripe (Payment Processing)

We use Stripe to process payments. Your payment information is sent directly to Stripe and is not stored on our servers. See Stripe's Privacy Policy.

5.2 PostHog (Analytics)

We use PostHog for website analytics. Data is processed on EU servers. See PostHog's Privacy Policy.

5.3 Shipping Partners

We share your shipping address with our logistics partners to deliver your order.

6. Data Retention

We retain your data for:

• Order data: 10 years (German tax law requirement)
• Support communications: 3 years after resolution
• Marketing preferences: Until you unsubscribe

7. Your Rights (GDPR)

You have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate data
• Erasure — Request deletion of your data (where legally permitted)
• Restriction — Limit how we process your data
• Portability — Receive your data in a machine-readable format
• Object — Object to processing based on legitimate interest
• Withdraw consent — Withdraw consent at any time

To exercise these rights, contact us at support@cubeworksgmbh.de.

8. Cookies and Analytics

8.1 Analytics (PostHog)

We use PostHog to collect anonymous usage data such as page views and button clicks. PostHog is self-hosted on EU servers, meaning your analytics data does not leave the European Union.

8.2 Cookie Consent

When you first visit our website, a consent banner gives you the choice to accept or decline analytics cookies:

• Accept: PostHog stores a cookie and localStorage entry to recognise you as a returning visitor across sessions. This helps us understand how people use our site over time.
• Decline: PostHog runs in memory-only mode. We still collect anonymous, single-session analytics (page views, clicks) under our legitimate interest in improving the website (Art. 6(1)(f) GDPR), but no data persists after you close your browser tab and no cross-session identification occurs.

You can change your choice at any time by clicking "Cookie Settings" in the website footer.

8.3 Essential Cookies

Our checkout process uses essential cookies provided by Stripe for payment processing. These are strictly necessary and do not require consent.

8.4 No Advertising or Third-Party Tracking

We do not use advertising cookies, retargeting pixels, or any third-party tracking services. Your data is never sold or shared with advertisers.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including HTTPS encryption for all data transmission.

10. International Transfers

Your data may be processed by service providers outside the EU (e.g., Stripe). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

11. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. For Germany:

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact

For questions about this privacy policy, contact us at: