1. Controller and contact
The controller for this website and the SKULYX Early Beta waiting list is XARANEX GmbH & Co. KG, Frenkstraße 64b, 52393 Hürtgenwald, Germany. Email: info@skulyx.com. See our legal notice for additional contact details.
2. Website delivery and technical access data
For secure delivery and operation of our website, technical information may be processed, including your IP address, request date and destination, browser or device information, HTTP status codes and security events. Cloudflare provides the infrastructure and may process such information in operational and security logs. We use these data to deliver the website, diagnose errors and prevent attacks, on the basis of our legitimate interests (GDPR Art. 6(1)(f)). Log retention is subject to Cloudflare's applicable technical and contractual retention settings, which we review periodically.
3. Early Beta waiting list and double opt-in
When you voluntarily join the waiting list, we process your email address, chosen language, registration and verification dates, confirmation status, invitation details and consent information. Only a cryptographic hash of the time-limited email confirmation token is kept in our database. We send a confirmation message (double opt-in), then may contact you about the Early Beta and how to register. Joining is voluntary and is not a paid subscription. Our legal basis is your consent (GDPR Art. 6(1)(a)); we cannot send an invitation without your email address.
4. Contact form and email communication
When you contact us, we process your name, email address and message to respond to you. Use of the form requires your consent (GDPR Art. 6(1)(a)). Messages are forwarded to info@skulyx.com and processed in our email inbox, but are not separately stored in our waiting-list database. Where an inquiry concerns potential contractual steps, GDPR Art. 6(1)(b) may also apply. Providing the details is voluntary but necessary for a reply.
5. Spam and abuse prevention: Cloudflare Turnstile
We use Cloudflare Turnstile to protect our forms. Cloudflare may process IP addresses, browser or device information and interaction data to identify automated or abusive submissions. The legal basis is our legitimate interest in preventing abuse (GDPR Art. 6(1)(f)). Access to or storage of strictly necessary information on a device is assessed under Section 25(2) of the German TDDDG. Depending on the actual service configuration, additional consent may be necessary. See Cloudflare's privacy policy.
6. Recipients and international transfers
Cloudflare provides our technical services (Workers, D1, email sending, Turnstile and security services). Data may also be disclosed to our email delivery and mailbox providers for communication purposes. Where Cloudflare processes personal data outside the European Economic Area, the applicable safeguards include EU standard contractual clauses and, where relevant, an applicable adequacy decision, as described in the Cloudflare Data Processing Addendum. We do not guarantee exclusive storage within Germany or the EU.
7. Retention, withdrawal and deletion
Unconfirmed waiting-list entries are automatically deleted within 14 days. Confirmed or invited entries are deleted no later than 24 months after joining, unless another lawful reason requires retention. Using the signed unsubscribe link immediately removes your waiting-list entry. You may withdraw your consent at any time for the future by contacting info@skulyx.com. Contact messages are deleted when the inquiry has been handled, unless legal retention requirements or legitimate grounds require keeping them longer. Technical security logs follow the retention arrangements in Section 2.
8. Cookies, tracking and automated decisions
We do not use our own advertising or marketing trackers on this website. Cloudflare's necessary security features, including Turnstile, may use cookies or similar technologies. The waiting list does not perform automated decision-making under GDPR Art. 22 or profiling to assess individual users.
9. Your rights
Subject to legal conditions, you may request access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18) and portability (Art. 20 GDPR). You may withdraw consent with future effect (Art. 7(3)) and object to processing based on legitimate interests (Art. 21). Contact info@skulyx.com to exercise these rights.
You may also complain to a data protection supervisory authority, in particular the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf: www.ldi.nrw.de.
10. Version
31 October 2026. This information covers the public SKULYX website, the Early Beta waiting list and contact form. Separate notices may apply to future customer accounts and other products.