Skip to content
Menu

Privacy Policy

Last updated: October 2026

1. Privacy at a Glance

This privacy policy explains what happens to your personal data when you visit unfilteredmoms.com. Personal data is any data that can be used to identify you personally.

In short: this website does not use cookies, has no newsletter and no contact form, and loads no third-party content until you actively choose to. To run the site securely we process technical data (such as your IP address) in server log files and at our content delivery network, and we measure reach with a self-hosted, cookieless analytics tool that works with pseudonymous data. The details are below.

2. Controller

The controller responsible for data processing on this website is:

CallunaLabs GmbH
Katzenstraße 1a
21335 Lüneburg
Germany

Commercial Register: HRB 212597
Register Court: Lüneburg Local Court (Amtsgericht Lüneburg)

Represented by:
Justus Becker & Heiko Stammel

Contact
Phone: +49 4178 818041
Email: [email protected]
Website: https://callunalabs.ai

VAT ID
VAT identification number under Section 27a of the German VAT Act (UStG):
DE451591925

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses).

3. General Information and Mandatory Disclosures

Data protection
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Please note that data transmitted over the internet (e.g., when communicating by email) may be subject to security gaps. Complete protection of data against access by third parties is not possible.

Storage period
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for which it was processed no longer applies. If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing it (e.g., retention periods under tax or commercial law); in that case, the data will be deleted once those reasons no longer apply.

General information on the legal bases for data processing on this website
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR. If you have explicitly consented to the transfer of personal data to third countries, the processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your device, the processing is also based on Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Consent can be withdrawn at any time. If your data is required to perform a contract or to take steps prior to entering into a contract, we process it on the basis of Art. 6(1)(b) GDPR. We also process your data where this is necessary to comply with a legal obligation, on the basis of Art. 6(1)(c) GDPR. Processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR. The legal basis that applies in each individual case is explained in the following sections of this privacy policy.

Data transfers to third countries and to US companies
Some of the services described in this policy are provided by companies based outside the EU, in particular in the USA. When these services are active, your personal data may be transferred to and processed in those countries. Please note that in third countries without an adequate level of protection, a level of data protection comparable to that in the EU cannot be guaranteed.

For recipients in the USA certified under the EU-U.S. Data Privacy Framework, transfers are based on the European Commission's adequacy decision (Art. 45 GDPR). Otherwise, we rely on Standard Contractual Clauses (Art. 46(2)(c) GDPR). Information on transfers to third countries, including the recipients, is provided in the relevant sections of this privacy policy.

Recipients of personal data
In the course of our business, we work with various external parties. In some cases, this requires transferring personal data to them. We only pass on personal data to external parties if this is necessary to perform a contract, if we are legally required to do so (e.g., disclosure to tax authorities), if we have a legitimate interest in the transfer under Art. 6(1)(f) GDPR, or if another legal basis permits the transfer. When we use processors, we transfer personal data only on the basis of a valid data processing agreement.

SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" at the beginning of the address in your browser's address bar and by the lock icon.

When SSL/TLS encryption is active, the data you send to us cannot be read by unauthorized third parties. Service providers that run our infrastructure on our behalf as processors (such as our content delivery network) can process the data in order to deliver it.

4. Your Rights

Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw any consent you have given at any time. Withdrawal does not affect the lawfulness of the processing carried out before the withdrawal.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE LEGAL BASIS ON WHICH EACH PROCESSING OPERATION IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority
If the GDPR is violated, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged violation. This right is without prejudice to any other administrative or judicial remedies. The supervisory authority responsible for us is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done where technically feasible.

Access, rectification and erasure
Within the scope of the applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients and the purpose of the processing, and, where applicable, a right to have this data rectified or erased. For this purpose and for any other questions about personal data, you can contact us at any time.

Right to restriction of processing
You have the right to request that the processing of your personal data be restricted. You can contact us at any time for this purpose. The right to restriction of processing applies in the following cases:

If you have restricted the processing of your personal data, such data may – apart from being stored – only be processed with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

5. Hosting and Content Delivery

Hosting
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on servers in Germany. Our analytics tool Umami runs on a Hetzner server in Helsinki, Finland (EU). We have concluded a data processing agreement with Hetzner (Art. 28 GDPR).

Server log files
Our web server does not keep access logs. Request data (such as your IP address) is processed only by our content delivery network, Cloudflare, as described under "Content delivery (Cloudflare)".

Content delivery (Cloudflare)
We use Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) as a content delivery network and to protect our website against attacks. Requests to our website are routed through Cloudflare's servers; Cloudflare processes your IP address and technical request data for this purpose. Cloudflare is certified under the EU-U.S. Data Privacy Framework. We have concluded a data processing agreement with Cloudflare. Cloudflare retains log data for a limited period in accordance with its data processing agreement. Legal basis: Art. 6(1)(f) GDPR.

In our configuration, Cloudflare sets no cookies. If its security features detect suspicious traffic and show a browser check or challenge, Cloudflare may set strictly necessary security cookies (such as __cf_bm or cf_clearance). This is permitted under Section 25(2) No. 2 TDDDG; the legal basis for the related processing is Art. 6(1)(f) GDPR (our legitimate interest in protecting the website). To protect email addresses shown on our pages from spam bots, Cloudflare also delivers a small script from our own domain that decodes them in your browser; it sets no cookies and sends no additional data.

6. Data Collection on This Website

Cookies
This website does not use cookies or similar technologies that store information on your device (with the exception of Cloudflare security cookies, see "Content delivery"). We do not use a consent banner because no technologies requiring consent are loaded unless you actively choose to load them (see "Embedded videos and content").

Web analytics (Umami)
To understand how our content is used, we use Umami, an open-source analytics tool that we host ourselves on a server of Hetzner Online GmbH in Helsinki, Finland (EU). Requests to the analytics server are also routed through Cloudflare (see above). Umami does not use cookies and does not create user profiles across websites.

When you visit a page, Umami uses your full IP address to determine your approximate location (country, and possibly region and city) and computes a pseudonymous session ID from your IP address, your browser's user agent and a salt that changes every month. Your full IP address is not stored. For each session, Umami stores the pages you view together with the referrer, browser, operating system, device type, screen size, language and approximate location. Because the salt changes monthly, visits cannot be linked across months. No data is passed on to third parties.

The script stores nothing on your device. To work, it reads a few values from your browser: screen size, language, your "Do Not Track" setting and, if set, an opt-out flag in local storage. We keep this access to the minimum the tool needs. We have configured Umami to respect "Do Not Track": if your browser sends this signal, no data is recorded. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in understanding how our content is used). Umami data is retained for up to 24 months and then deleted.

Contact by email or phone
If you contact us by email or phone, we process your message and contact details to handle your request. Legal basis: Art. 6(1)(b) GDPR if your request relates to a contract or steps prior to entering into one, otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering inquiries). We delete the data once your request has been handled, unless statutory retention obligations apply.

Fonts
The fonts on this website are hosted on our own server. Your browser does not connect to Google or any other font provider.

Search
The search function runs entirely in your browser using an index loaded from our own server. Search terms are not sent to us or to third parties.

Images
Article images come from the German-language magazine StadtLandMama (stadtlandmama.de). They are delivered from our own server (unfilteredmoms.com); your browser does not connect to any third-party server to display them.

7. Embedded Content and External Links

Embedded videos and content
Some articles contain videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) or graphics from Canva (Canva Pty Ltd, 110 Kippax Street, Surry Hills NSW 2010, Australia). These are not loaded automatically. Instead, you will see a placeholder; only when you click "Load video" or "Load content" is a connection to the provider established, and your IP address and technical data are transmitted to them. YouTube videos are then loaded in privacy-enhanced mode (youtube-nocookie.com). The provider may set cookies and process your data outside the EU. Legal basis: your consent by clicking, Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

When you load a YouTube video, data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. Canva is based in Australia, for which there is no EU adequacy decision; transfers to Canva are based on your consent (Art. 49(1)(a) GDPR) and on Standard Contractual Clauses.

Affiliate links
Some articles contain affiliate links, for example to Amazon (Amazon Europe Core S.à r.l.). Articles that contain such links carry a notice. As an Amazon Associate, we earn from qualifying purchases. No data is transmitted to Amazon while you read; only when you click such a link are you taken to Amazon's website, which then processes your data under its own privacy policy and may use cookies to attribute the purchase to us. Legal basis for the link itself: Art. 6(1)(f) GDPR (our legitimate interest in financing our free content).

Sharing
The share buttons (Facebook, Pinterest, email) are plain links. No data is transmitted to these services until you click one.

German edition
Articles on Unfiltered Moms are adaptations of articles first published in German on stadtlandmama.de. Links to the German original lead to that website, which has its own privacy policy.