Last updated: 13 August 2026
This Privacy Policy explains how Numerisch GmbH processes personal data when you visit or use ModularGrid. ModularGrid is intended for users aged 18 or older.
Numerisch GmbH
Erich-Weinert-Straße 13
10439 Berlin
Germany
Email: kontakt@numerisch.com
Website: modulargrid.net
When you access ModularGrid, our systems process technical request data needed to deliver and secure the website. This may include your IP address, date and time, requested URL, referrer, browser and operating-system information, device information, response status and transferred data volume.
We use this data to provide the service, diagnose technical problems, prevent abuse and attacks, and investigate security incidents. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the reliable and secure operation of ModularGrid and the protection of our users and systems. Log data is deleted or aggregated through our operational log-rotation process when it is no longer needed. Relevant entries may be retained for longer where they are required to investigate an incident, establish or defend legal claims, or comply with a legal obligation.
ModularGrid uses cookies and similar browser storage. Some are strictly necessary to provide the service. Optional technologies are activated only in accordance with the choices available in our consent manager. You can review or change optional choices at any time through Cookie Preferences in the page footer. Withdrawing consent does not affect processing that took place before the withdrawal.
Strictly necessary storage is based on Section 25(2) TDDDG and Article 6(1)(b) or (f) GDPR. Where we ask for consent, the legal basis is Section 25(1) TDDDG and Article 6(1)(a) GDPR.
To create and operate an account, we process your username, email address, password hash, registration and login timestamps, login and failed-login counters, account status and your selected settings. If you provide them, we also process profile information such as country, location, avatar, signature, preferred currency and measurements, social or music-profile links, notification settings and subscription status.
Your username and the profile information that you choose to publish can be seen by other users and may be indexed by search engines. Your email address and password are not displayed publicly. Please do not publish information that you do not want to be public.
We process account data to perform the user agreement and provide account features under Article 6(1)(b) GDPR. Security records and account-status information are also processed under Article 6(1)(f) GDPR for abuse prevention, service integrity and the establishment or defence of legal claims.
Racks, module submissions and edits, forum threads and posts, ratings, collections, patches, offers and other content that you submit are stored with your user ID, username and timestamps. Depending on the feature and your privacy settings, this content may be public and searchable. Forum posts also store the IP address used to submit them for moderation, abuse prevention and legal defence.
Processing is necessary to provide the community features under Article 6(1)(b) GDPR. Moderation, version history, fraud prevention and the preservation of a reliable community record are based on Article 6(1)(f) GDPR. Our legitimate interests are operating the community, preventing manipulation and abuse, resolving disputes and protecting the rights of users and third parties.
For private messages, we process sender and recipient IDs, usernames and email addresses, subject, message text, timestamps, reply references, delivery and deletion status, and the sender's IP address. Message content is available to the sender and recipient. Authorised administrators may access it only where necessary for support, abuse investigation, security or legal compliance.
If email notification is enabled, the notification may contain the sender's username, subject and message content. Images attached to private messages are stored in Google Cloud Storage and referenced by a generated URL. Anyone who obtains such a URL may be able to access the image, so attachments should not contain sensitive information.
This processing is based on Article 6(1)(b) GDPR for message delivery and Article 6(1)(f) GDPR for security and abuse prevention. Google Cloud processes attachments on our behalf. See the Google Privacy Policy.
Marketplace offers may include your username, module, region, price, currency and public comment. We also store the IP address used to create or edit the offer, together with the status and result of a VPN check. The result may be shown with the offer to help users assess marketplace activity.
For the VPN check, the IP address is sent to proxycheck.io. No username, email address or other ModularGrid account data is included. Address Logging is disabled for our proxycheck.io account, so proxycheck.io processes the submitted IP address for the lookup but does not retain it in its address logs. More information is available in the proxycheck.io GDPR information.
This processing is based on Article 6(1)(f) GDPR. Our legitimate interests are reducing fraud, improving transparency and protecting marketplace participants. The check does not prevent an offer from being saved merely because a VPN is detected.
We use your email address for account confirmation, password and username recovery, security notices, replies to support enquiries, receipts and notifications you have requested or enabled, such as forum, private-message or marketplace notifications. Notification settings can be changed in your account or, where provided, through the link in the notification.
Service and account emails are based on Article 6(1)(b) GDPR. Security and necessary administrative messages are based on Article 6(1)(f) GDPR. Optional notifications are sent at your request and can be disabled at any time.
Paid supporter and manufacturer features can be purchased through PayPal. To initiate a payment, we send PayPal the price, currency and product description. PayPal returns transaction and payer details required to confirm the payment. We process the PayPal payer ID, transaction status and details needed for payment confirmation, receipts, bookkeeping, support, fraud prevention and legal compliance. We do not receive your full payment-card or bank-account credentials from PayPal.
Payment processing is based on Article 6(1)(b) GDPR. Tax and accounting retention is based on Article 6(1)(c) GDPR. Fraud prevention and the defence of legal claims are based on Article 6(1)(f) GDPR. PayPal processes data under its own responsibility. See the PayPal Privacy Statement.
We use Google reCAPTCHA on registration, credential-recovery and forum features to distinguish human users from automated abuse. The browser sends data to Google that may include the IP address, page and referrer URLs, browser and device information, interaction data and Google cookies. Our server sends the reCAPTCHA token and IP address to Google for verification. Without reCAPTCHA, the protected functions cannot be provided.
We regard reCAPTCHA as necessary for the secure provision of these specifically requested functions. Processing is based on Article 6(1)(f) GDPR and Section 25(2) TDDDG. Google Ireland Limited processes the data in accordance with the Google Privacy Policy and Google Terms of Service.
Module pages use the YouTube Data API to search for public videos related to the displayed module. The search term, usually the public module or manufacturer name, is sent directly from your browser to Google together with technical request data such as your IP address and browser information. The API returns public video IDs, titles, thumbnails and related metadata. We do not request access to your YouTube account and do not access or store authorised YouTube user data.
Search-result thumbnails are served by Google and can therefore also transmit technical request data to Google. A selected video is embedded from YouTube's privacy-enhanced domain only after you consent to YouTube in Cookie Preferences or choose to load the content. When a video is loaded, Google and YouTube may process your IP address, page URL, browser information, device identifiers, cookies and playback activity and may associate them with a signed-in Google account.
The public video search is based on Article 6(1)(f) GDPR; our legitimate interest is providing useful product-related video information. Loading the embedded player is based on your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. ModularGrid uses YouTube API Services and users of these features are also subject to the YouTube Terms of Service. For Google's processing, see the Google Privacy Policy.
User content may include SoundCloud or Bandcamp players. These players are not loaded until you consent to the respective service or choose to load the content. Once loaded, the provider receives technical request data such as your IP address, browser information, the referring ModularGrid page and playback interactions, and may use cookies or associate the visit with an existing account.
The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. See the SoundCloud Privacy Policy and Bandcamp Privacy Policy.
If you consent to analytics, ModularGrid uses Google Analytics 4 (GA4) to understand how the website
is used and to improve its content and performance. Google may process information such as a
pseudonymous client ID, page views and other usage events, session information, page URL, referrer,
access time, approximate location, and browser and device information. GA4 uses first-party cookies
including _ga and _ga_<measurement-id> to distinguish users and maintain
session state. These cookies have a default lifetime of up to two years.
Google uses the IP address during collection to derive approximate location information. According to Google, IP addresses from users in the European Union are discarded before the analytics data is logged and are not stored in Google Analytics.
Detailed event-level data is retained in our GA4 property for two months. User-level data is retained for 14 months. The user-data retention period is not reset when a user becomes active again. These retention settings do not affect aggregated standard reports, which may remain available without the underlying user-level and event-level detail data.
The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw consent through Cookie Preferences. See the Google Privacy Policy.
We use Sentry to detect and diagnose software errors. The Sentry browser library is loaded from Sentry's content-delivery network. When an error occurs, the browser integration may send error and stack information, page and script URLs, browser and device details and technical request information. Default personal-data collection is disabled in the browser configuration.
Server-side error reports may additionally include the request URL, method, referrer, IP address, user agent and, for signed-in users, user ID and username, as well as diagnostic context supplied by the affected feature. We configure Sentry not to collect default PII, but diagnostic data may still be personal if it relates to a user or request.
Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is detecting defects, securing the service and maintaining reliable operation. Sentry processes data on our behalf. See the Sentry Privacy Policy.
ModularGrid displays links and offers from partners such as eBay, Reverb and Thomann. We may receive a commission if you follow an affiliate link or make a purchase. A normal link does not transmit your ModularGrid account data to the partner before you click it. When you open an external link, the destination receives the usual browser request data and may recognise the affiliate reference. The destination provider is responsible for its own processing.
Personal data may be disclosed to:
Some providers, including Google, Sentry and PayPal, may process data in the United States or other countries outside the European Economic Area. Depending on the provider and destination, transfers are protected by an adequacy decision, including the EU-U.S. Data Privacy Framework where applicable, European Commission Standard Contractual Clauses, or another lawful transfer mechanism. Further details are available in the linked provider policies or from us on request.
Subject to the requirements and limits of applicable law, you have the right to:
To exercise your rights, email kontakt@numerisch.com. We may need to verify your identity before acting on a request. Where data must be retained to meet a legal obligation or establish, exercise or defend legal claims, deletion may be restricted accordingly.
You may lodge a complaint with any competent supervisory authority. The authority responsible for Berlin-based companies is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany
Email: mailbox@datenschutz-berlin.de
Website: datenschutz-berlin.de
We update this Privacy Policy when our services, providers or legal obligations change. The current version and its update date are published on this page.