Privacy Policy
This policy covers the marketing website at orapulse.app. The products Orapulse Studio and Orapulse Floor are covered by a separate policy, available at studio.orapulse.app/legal/privacy.
1. Controller
Bricks + Braces GmbH
Kienberger Allee 4, 12529 Schoenefeld, Germany
Represented by: Hendrik Ulbrich, Fabian Klonsdorf
Email: privacy@bricksandbraces.com
We have not appointed a data protection officer, as we are not required to do so under section 38 BDSG. The competent supervisory authority is the State Commissioner for Data Protection and the Right of Access to Information of Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.
2. Hosting and delivery of the website
This website is built and served with Framer, operated by Framer B.V., Singel 126, 1015 AE Amsterdam, Netherlands.
When you open the site, technically necessary connection data is processed, in particular your IP address, the date and time of the request, the page requested, the referring page, browser type and operating system. The site cannot be delivered without this. Content such as images and fonts is loaded from the Framer domains framerusercontent.com and app.framerstatic.com.
Purpose: providing the website, keeping it stable and secure.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functioning and securely delivered website).
Third country: none. Framer B.V. is based in the Netherlands.
3. Reach measurement by Framer
Framer collects its own aggregated traffic statistics. Data is sent to events.framer.com when a page is opened. The measurement works without cookies and without identifiers that would recognise you beyond the single request; according to Framer the data is evaluated anonymously.
Purpose: determining page views and where visits come from.
Legal basis: Art. 6(1)(f) GDPR.
Objection: you may object to this processing under Art. 21 GDPR; an informal message to privacy@bricksandbraces.com is enough.
4. Google Analytics 4
We use Google Analytics 4, loaded through Google Tag Manager. For users in the EEA the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data is collected via the European endpoint region1.google-analytics.com.
Without your consent no cookies are set and no identifiers are stored on or read from your device. Google Analytics then runs in consent mode: only cookieless, aggregated signals are transmitted, which cannot recognise your device. What is transmitted in that state is your IP address, the page you opened and technical details about your browser and device.
With your consent Google Analytics sets the cookies _ga and _ga_FXFFZ0NTRM to attribute repeat visits to the same device. Only then do metrics such as sessions and returning visitors become available.
Purpose: analysing how the site is used in order to improve it.
Legal basis: your consent under section 25(1) TDDDG and Art. 6(1)(a) GDPR for setting and reading the cookies; Art. 6(1)(f) GDPR for the cookieless transmission that takes place before consent.
Withdrawal: you can change your choice at any time with effect for the future via “Cookie Settings” at the bottom of the page.
Third country: Google Ireland Limited may transfer data to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework; the EU standard contractual clauses apply in addition.
Retention: the cookies expire after 24 months at the latest; the reports in Google Analytics are deleted after 14 months.
5. Waitlist
At orapulse.app/waitlist you can leave your email address to hear about the product launch. The signup is handled by getwaitlist.com, operated by Waitlist, LLC (United States).
Data: your email address and technical transmission data.
Purpose: adding you to the waitlist and notifying you at launch.
Legal basis: Art. 6(1)(a) GDPR — consent, given by submitting the form.
Withdrawal: informally at any time to privacy@bricksandbraces.com; we will delete your entry without undue delay.
Third country: United States. The transfer is based on the EU standard contractual clauses.
6. Cookies and local storage
What is stored
Purpose
Basis
framerCookiesConsentMode (local storage)
stores your choice from the cookie banner
strictly necessary, section 25(2) TDDDG
_ga, _ga_FXFFZ0NTRM (cookies)
Google Analytics, see section 4
consent, section 25(1) TDDDG
Without your consent only the first entry is stored — it records whether and how you decided. You can change your choice at any time via “Cookie Settings” at the bottom of the page.
7. Recipients at a glance
Recipient
Purpose
Location / third country
Framer B.V.
hosting, delivery, reach measurement
Netherlands (EU)
Google Ireland Limited
Google Analytics 4, Google Tag Manager
Ireland (EU); possibly the US under the DPF and SCCs
Waitlist, LLC
waitlist
United States, SCCs
We use no other analytics, marketing or tracking services on this website. In particular there is no Hotjar and no Google Ads conversion tracking.
8. Retention
Connection and server data is processed only for as long as delivering and securing the website requires. The periods stated in section 4 apply to Google Analytics. Waitlist entries are deleted once they have served their purpose or you object.
9. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21) against processing based on a legitimate interest. Where you have given consent, you may withdraw it at any time with effect for the future. Please address requests to privacy@bricksandbraces.com.
You also have the right to lodge a complaint with a data protection supervisory authority.
10. No automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
Last updated: 18 August 2026