Skip to content
Back to home page

Legal notice

Information pursuant to Section 5 DDG

This is a translation for convenience. Projection-X is based in Germany; the German version of these terms is the binding one. Questions? Write to us via the support page.

Service provider

Nicolas Bauer
Einzelunternehmen
Paullinerstr. 1
79848 Bonndorf im Schwarzwald
Deutschland

Represented by

Nicolas Bauer

Contact

Email: connect@projection-x.de
Telephone: +49 151 21422093

Single point of contact (DSA)

Single point of contact pursuant to Art. 11 and 12 of Regulation (EU) 2022/2065 (Digital Services Act): email connect@projection-x.de. Communication is possible in German and English. We also accept notices of unlawful content from persons who are not registered users at this address.

Value added tax

VAT identification number pursuant to Section 27a UStG (German VAT Act): DE353860477

As a small business within the meaning of Section 19(1) UStG, no VAT is charged and consequently none is shown.

Responsible for the content

Nicolas Bauer, address as above.

Dispute resolution

We are neither willing nor obliged to take part in dispute resolution proceedings before a consumer arbitration board.

Liability for links

Our offering contains links to external third-party websites over whose content we have no influence. No warranty can be given for such external content; the respective provider or operator is always responsible for it. If we become aware of legal infringements, we will remove such links without delay.

Last updated: 3 October 2026 · Version 1.3.1

Cancel contracts here

Cookies and content

What this site may load

What is necessary always runs: sign-in, language, cart and the protection of forms. Everything else is your choice.

  • Remember hints: dismissed hints and your step in the tour stay stored beyond the session.
  • App & offline: the hub becomes installable as an app and shows an offline page without a connection.
  • Videos & 3D: moving images and the 3D stage from our own server. This is not consent but your preference on data usage.
  • External media: videos and images from Mux, YouTube, Vimeo and Instagram. 3 further controllers (Google, Vimeo, Meta) receive data such as your IP address, also in the USA (EU-US Data Privacy Framework).

Both buttons take you to the site. You can change your choice at any time at the bottom of every page under “Cookie settings”. Withdrawal takes effect from then on, not retroactively.

ImprintPrivacyCancel contracts here

All categories and providers in detail

Everything is off by default. A switch takes effect only with “Save choice”.

Necessary

Always on

Without these entries, sign-in, cart, checkout and security do not work. They cannot be switched off.

Entries (22)

  • sb-<ref>-auth-token

    Type
    Cookie
    Purpose
    Keeps you signed in. Only created when you sign in.
    Duration
    up to 400 days (default of the sign-in library); ends when you sign out
    Provider
    Projection-X with Supabase (processor)
    Role
    Processor
    Third country
    USA possible (Supabase Inc.; EU-US Data Privacy Framework, standard contractual clauses)
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

  • sb-<ref>-auth-token-code-verifier

    Type
    Cookie
    Purpose
    Secures the return from Google sign-in. Only created after “Sign in with Google”.
    Duration
    short, until sign-in is complete
    Provider
    Projection-X with Supabase (processor)
    Role
    Processor
    Third country
    USA possible (Supabase Inc.; EU-US Data Privacy Framework, standard contractual clauses)
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

  • px2fa_ok

    Type
    Cookie
    Purpose
    Remembers that the second factor was confirmed on this device.
    Duration
    30 days
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)

  • pxag_ok

    Type
    Cookie
    Purpose
    Remembers the passed extra check for the admin area (team only).
    Duration
    12 hours
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)

  • px_next

    Type
    Cookie
    Purpose
    Remembers your destination when you sign in with Google, so you land there afterwards.
    Duration
    10 minutes
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

  • px_aktion_<id>

    Type
    Cookie
    Purpose
    Remembers that you entered the access word of a promotion.
    Duration
    until you close the browser
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

  • px_hub

    Type
    Cookie
    Purpose
    Lets team members and testers into the hub before launch (after approval or the correct tester PIN). Signed, holds the account ID and only valid for that account; only created then.
    Duration
    12 hours
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (access protection)

  • px_absicht

    Type
    Cookie
    Purpose
    Remembers that you chose “With Patreon” when registering, so your new account is assigned to it. Not a proof of entitlement. Only created when you click.
    Duration
    Session (until you close the browser); only created when you click and deleted once your account is created or you continue without Patreon
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

  • px_ref

    Type
    Cookie
    Purpose
    Remembers the invitation code you register with until your account is created. Only created when you click “Register”; opening an invitation link sets no cookie.
    Duration
    Session (until you close the browser); only created when you click
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

  • px_patreon_state

    Type
    Cookie
    Purpose
    Operator area only: secures connecting the operator’s Patreon account (signed check value with the operator’s account ID). Only valid on the way back from Patreon.
    Duration
    10 minutes
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)

  • px_google_start

    Type
    Cookie
    Purpose
    Remembers for up to ten minutes that the security check was passed before signing up with Google. Only needed for new accounts; deleted after returning from Google. Contains no personal data.
    Duration
    10 minutes
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)

  • px-cart

    Type
    Browser storage
    Purpose
    Your cart, only the product identifiers. Only after “Add to cart”.
    Duration
    at most 30 days
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

  • px-cart-checkout

    Type
    Browser storage
    Purpose
    Remembers the items that just went to checkout until you return.
    Duration
    until you close the tab
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

  • px-lesson-notes:*

    Type
    Browser storage
    Purpose
    Your own notes on a lesson. Only when you write them.
    Duration
    until you delete them
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

  • Page structure and images

    Type
    Service
    Purpose
    Page structure, fonts and images of this website from our own server.
    Duration
    usual browser caching
    Provider
    Projection-X, hosted by Vercel (processor)
    Role
    own service
    Third country
    USA (Vercel Inc.; EU-US Data Privacy Framework)
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

  • Card pick sounds

    Type
    Service
    Purpose
    Short sounds of the card pick from our own server (/media/praeregistrierung/sfx). They only load after your click on the card page; the “Sound” switch turns them off. Nothing is stored on your device.
    Duration
    nothing stored on your device
    Provider
    Projection-X, hosted by Vercel (processor)
    Role
    own service
    Third country
    USA (Vercel Inc.; EU-US Data Privacy Framework)
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

  • Supabase

    Type
    Service
    Purpose
    Sign-in, registration and password reset. Only when you use one of them.
    Duration
    no storage of its own in your browser
    Provider
    Supabase Inc. (processor)
    Role
    Processor
    Third country
    USA possible (Supabase Inc.; EU-US Data Privacy Framework, standard contractual clauses)
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

  • Stripe

    Type
    Service
    Purpose
    Payment: we forward you to Stripe’s checkout. No Stripe script loads on this website.
    Duration
    no storage on this website; Stripe sets its own cookies on its checkout page
    Provider
    Stripe (partly an independent controller)
    Role
    Controller
    Third country
    USA (Stripe, Inc.; EU-US Data Privacy Framework)
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

  • LiveKit

    Type
    Service
    Purpose
    Video coaching in the live room. Only when you enter a coaching room.
    Duration
    no storage of its own in your browser
    Provider
    LiveKit Inc. (processor)
    Role
    Processor
    Third country
    USA (LiveKit Inc.; standard contractual clauses)
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

  • Cloudflare Turnstile

    Type
    Service
    Purpose
    Protection against automated registrations and sign-ins. Loads only in forms that need it, and only after your choice.
    Duration
    no cookies on this website (according to Cloudflare)
    Provider
    Cloudflare, Inc. (processor; independent controller for improving bot detection)
    Role
    Processor
    Third country
    USA (Cloudflare, Inc.; EU-US Data Privacy Framework)
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)

  • Cloudflare R2 (direct upload)

    Type
    Service
    Purpose
    Direct uploads of large files in the admin and studio area and in coaching.
    Duration
    no storage of its own in your browser
    Provider
    Cloudflare, Inc. (processor)
    Role
    Processor
    Third country
    USA (Cloudflare, Inc.; EU-US Data Privacy Framework)
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

Necessary, by your own choice

Settings you make yourself, without an identifier. They are stored only once you change them.

Entries (5)

  • px_locale

    Type
    Cookie
    Purpose
    Your language. Only when you switch it yourself.
    Duration
    12 months
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG (a setting you chose); Art. 6(1)(f) GDPR

  • px_nav

    Type
    Cookie
    Purpose
    Sidebar or top bar. Only when you switch the layout yourself.
    Duration
    12 months
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG (a setting you chose); Art. 6(1)(f) GDPR

  • px-display

    Type
    Browser storage
    Purpose
    Your display settings: motion off, 3D, smooth scrolling, cursor. Only when you switch them yourself.
    Duration
    until you reset the setting
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG (a setting you chose); Art. 6(1)(f) GDPR

  • px-fuer-dich

    Type
    Browser storage
    Purpose
    Hides the “For you” block if you chose so yourself.
    Duration
    until you show the block again
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG (a setting you chose); Art. 6(1)(f) GDPR

  • px-player-subtitles

    Type
    Browser storage
    Purpose
    Your subtitle choice in the course player.
    Duration
    until you change it
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Sec. 25(2) no. 2 TDDDG (a setting you chose); Art. 6(1)(f) GDPR

Only during an attack

During an attack on the website, the firewall of our host checks that a real browser is asking.

Entries (1)

  • _vcrcs

    Type
    Cookie
    Purpose
    Only during an attack on the website: the firewall checks that a real browser is asking and remembers the passed check.
    Duration
    1 hour
    Provider
    Vercel Inc. (processor)
    Role
    Processor
    Third country
    USA (Vercel Inc.; EU-US Data Privacy Framework)
    Legal basis
    Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)

Remember hints

Dismissed hints, promotions and pop-ups as well as your step in the introductory tour stay stored. Without this choice they last only until you close the tab.

Entries (4)

  • px_wt_step:<Konto>

    Type
    Browser storage
    Purpose
    Remembers at which step you left the introductory tour. The name contains your account identifier.
    Duration
    until the end of the tour
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR

  • px_install_dismissed

    Type
    Browser storage
    Purpose
    Remembers that you dismissed the app installation hint.
    Duration
    until you withdraw consent or clear the site data
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR

  • px_promo_dismissed

    Type
    Browser storage
    Purpose
    Remembers which promotions you dismissed (at most 40).
    Duration
    until you withdraw consent or clear the site data
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR

  • px_popup_<id>_<v>

    Type
    Browser storage
    Purpose
    Remembers which notice windows you dismissed.
    Duration
    until you withdraw consent or clear the site data
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR

App & offline

A service worker makes the hub installable and shows an offline page without a connection. Without this choice it is unregistered.

Entries (2)

  • Service Worker /sw.js

    Type
    Browser storage
    Purpose
    Makes the hub installable as an app and shows an offline page without a connection.
    Duration
    until you withdraw consent; it is then unregistered
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR

  • Cache px-hub-*

    Type
    Browser storage
    Purpose
    Stores the offline page and the app icons in your browser.
    Duration
    until you withdraw consent; it is then deleted
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    no transfer
    Legal basis
    Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR

Videos & 3D

Preference, not consent

Moving images and 3D from our own server. No third party, no consent; saves data.

Entries (2)

  • Videos from our own server

    Type
    Service
    Purpose
    Loops, films, tile, feed and course videos, clips and coaching recordings from our own server.
    Duration
    usual browser caching
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    USA (Vercel Inc. and Cloudflare, Inc. as processors; EU-US Data Privacy Framework)
    Legal basis
    no consent required (own server); your preference on data usage

  • 3D stage and demo data

    Type
    Service
    Purpose
    3D stage with model, textures and program code (about 3.6 MB) and the demo data of the stages.
    Duration
    usual browser caching
    Provider
    Projection-X (own server)
    Role
    own service
    Third country
    USA (Vercel Inc. as processor; EU-US Data Privacy Framework)
    Legal basis
    no consent required (own server); your preference on data usage

External media

Videos and images from other providers. Each provider sees your IP address when content loads; each can be switched on its own.

  • Type
    Service
    Purpose
    Streaming of course and product videos. Your browser loads the videos directly from Mux; Mux sees your IP address.
    Duration
    no storage of its own in your browser
    Provider
    Mux, Inc. (processor)
    Role
    Processor
    Third country
    USA (Mux, Inc.; EU-US Data Privacy Framework)
    Legal basis
    Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR
  • Type
    Service
    Purpose
    Embedded YouTube videos (www.youtube-nocookie.com) and their thumbnails. Google sees your IP address.
    Duration
    set by Google; this website cannot delete cookies on Google’s own domains
    Provider
    Google Ireland Limited (controller)
    Role
    Controller
    Third country
    USA (Google LLC; EU-US Data Privacy Framework)
    Legal basis
    Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR
  • Type
    Service
    Purpose
    Embedded Vimeo videos (player.vimeo.com, with “Do Not Track”) and their thumbnails. Vimeo sees your IP address.
    Duration
    set by Vimeo; this website cannot delete cookies on Vimeo’s own domains
    Provider
    Vimeo.com, Inc. (controller)
    Role
    Controller
    Third country
    USA (Vimeo.com, Inc.)
    Legal basis
    Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR
  • Type
    Service
    Purpose
    Embedded Instagram posts and their thumbnails. Meta sees your IP address.
    Duration
    set by Meta; this website cannot delete cookies on Meta’s own domains
    Provider
    Meta Platforms Ireland Limited (joint controller under Art. 26 GDPR)
    Role
    Joint controller
    Third country
    USA (Meta Platforms, Inc.; EU-US Data Privacy Framework)
    Legal basis
    Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR; joint controllership under Art. 26 GDPR (CJEU C-40/17)

This website cannot delete cookies that YouTube, Vimeo or Instagram set on their own domains. You can do that in your browser settings.

Choose individually