Privacy Policy

Last updated: 28 July 2026 · Draft — review before publishing

Noch offen — vor dem ersten Verkauf klären
Zwei Dinge fehlen in diesem Dokument und müssen ersetzt werden, bevor die Seite beworben oder etwas verkauft wird:

1. Postanschrift. Nach österreichischem ECG §5 und DSGVO Art. 13 muss ein identifizierbarer Verantwortlicher mit Straße, PLZ und Ort genannt sein. Eine bloße E-Mail-Adresse genügt nicht.

2. Gewerbeanmeldung. Der regelmäßige Verkauf von Trainingsplänen und Coaching gilt in Österreich in der Regel als gewerbliche Tätigkeit. Das ist keine Rechtsberatung — kläre mit der WKO oder einer Steuerberatung, welche Gewerbeberechtigung du brauchst, bevor du den ersten Verkauf tätigst.

1. Who is responsible

The controller for data processed through this website is:

Name / business: Gergö Szittyai
Address: Höchsterstraße 45, 6850 Dornbirn, Austria
Email: info@gergogains.com
VAT / company number: none — not yet registered as a business

2. Your reference photos never leave your device

The plan builder lets you attach front, back and side photos. These are read locally by your browser and shown back to you for your own reference. They are not uploaded, not transmitted and not stored on any server — there is no server. Closing or reloading the page discards them entirely.

Technically: the photos are handled by the browser's FileReader API and held only in page memory. This site makes no network requests with your inputs of any kind.

3. The plan you generate

Your age, weight, height, body-fat estimate, experience, goal, available days and equipment are used only inside your browser to compute your plan, FFMI and targets. They are not sent anywhere and are not retained after you leave.

4. Analytics and advertising — only if you agree

If you press Accept on the cookie notice, the following load:

Google Analytics 4 — measures pages viewed and whether visitors reach checkout. IP anonymisation is enabled.
Google Ads conversion tracking — tells us which advert brought a visitor who went on to buy, so advertising budget is not wasted.

These set cookies in the _ga / _gcl families, typically expiring within 24 months. Both are operated by Google Ireland Limited and may involve transfers to the United States under the EU–US Data Privacy Framework.

If you press Decline, none of it is requested — no script is fetched and no cookie is set. Your choice is remembered in your browser's local storage under gg_consent_v1. This is strictly necessary to honour your decision and is the only storage used without consent.

Legal basis: consent, GDPR Art. 6(1)(a). You may withdraw it at any time by clearing your browser storage for this site, which brings the notice back.

5. Fonts

Typefaces are served from this website's own domain. Loading them does not contact Google, or any other third party, and happens without your IP address leaving this site. No cookie or storage of any kind is involved.

This was previously not the case: the fonts were embedded from fonts.googleapis.com and fonts.gstatic.com, which transmitted your IP address to Google before any consent was given. A German court held that practice to be a GDPR breach (Landgericht München I, 20 January 2022, 3 O 17493/20). The font files are now hosted here, so the request no longer leaves this server.

6. Hosting

This site is served as static files by GitHub Pages (GitHub, Inc.). Like any web server, GitHub processes your IP address and request metadata in order to deliver the page and to protect the service. We have no access to those logs.

7. Payments

Purchases are handled entirely by Lemon Squeezy, who act as merchant of record and take on EU VAT obligations. When you click a buy button you are taken to their checkout; your card details are entered on their systems and are never seen by this site. We receive your email address and order details in order to deliver what you bought. See Lemon Squeezy's own privacy policy for their processing.

If you choose to pay in cryptocurrency, the payment is processed by Coinbase Commerce (Coinbase, Inc.). You are taken to their hosted checkout; we never see a private key or wallet credential. We receive the charge reference, the amount, and the email address you supply so we can deliver your purchase and handle any refund. A blockchain transaction is public and permanent by design — that is a property of the network, not something this site controls. If you would rather not have a purchase recorded on a public ledger, pay by card.

8. Your rights

Under the GDPR you may request access, correction, erasure, restriction or portability of your personal data, and object to processing. Because this site stores nothing about you server-side, most requests will concern data held by Lemon Squeezy or Google. Contact us at the address in section 1 and we will help.

You may also complain to the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna.

9. Not medical advice

Training and nutrition content on this site is general fitness guidance, not medical advice, and no diagnosis is made. Consult a doctor before starting any new training or diet, particularly if you have an existing condition.

10. Changes

Any future version will be posted here with an updated date.