Information on how we process your personal data when you use ye2 (ye2.io), pursuant to the EU General Data Protection Regulation (GDPR). Last updated: July 2026.
streamtank GmbH
Höllsteinstraße 24b, 61350 Bad Homburg, Germany
Email: info@streamtank.com
For questions about data protection or to exercise your rights, contact us at the address above or at support@ye2.io.
ye2 is an execution and task-management tool. When you create an account and use the service, we process:
Account data — email address, password (stored only as a cryptographic hash), and optionally your name.
Content data — the spaces, tracks, projects, tasks, goals, decisions, notes and similar content you create in the app.
Technical data — IP address, browser type, operating system and access timestamps, collected automatically in server logs when you access the service.
Legal bases: performance of the contract with you (Art. 6 (1) lit. b GDPR) for account and content data, and our legitimate interest in a secure, reliable service (Art. 6 (1) lit. f GDPR) for technical log data.
ye2 uses only technically necessary cookies: session cookies that keep you signed in. We do not use advertising or tracking cookies. Your display preferences (such as the color theme) are stored locally in your browser and are not transmitted to us. The legal basis is § 25 (2) TDDDG (strictly necessary) and Art. 6 (1) lit. f GDPR. Because no consent-requiring cookies are used, no cookie banner is shown.
We use the following processors under data-processing agreements (Art. 28 GDPR):
Vercel(Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA) hosts the application and processes server logs including IP addresses. Transfers to the USA are safeguarded by the EU standard contractual clauses and Vercel's certification under the EU-US Data Privacy Framework. Details: vercel.com/legal/privacy-policy.
Supabase(Supabase Inc., 970 Toa Payoh North #07-04, Singapore) provides our database and authentication. Your account and content data are stored in Supabase's cloud infrastructure. Details: supabase.com/privacy.
We do not use analytics services, advertising networks, or social-media plugins, and we do not sell personal data.
ye2 is a collaboration tool. Content you create inside a shared space (tasks, goals, decisions, blockers, your name/email as a member) is visible to the other members of that space according to their role. You control which spaces you join and what you put in them.
We store your data for as long as your account exists. If you delete content, it is removed from the live database; residual copies in encrypted backups expire on a rolling basis. When your account is deleted, your personal data is deleted unless statutory retention obligations (e.g. under tax or commercial law) require longer storage.
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority — for us, the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Wiesbaden.
All connections to ye2 are encrypted with TLS. Access to your data within the application is restricted by row-level security so that you and the members of your spaces can only see what your role permits.
We may update this privacy policy when the service or the legal situation changes. The current version is always available at ye2.io/privacy.
See also our Imprint.