Privacy Policy
Last updated: October 2026
This website is operated by Nicolas Matt.
We collect and process only personal information reasonably necessary to operate this website, communicate with visitors, provide our services, and maintain the security of the website.
When you visit this website, technical information such as your IP address, browser and device information, access time and requested pages may be processed by our hosting provider.
If you contact us, we process the information you provide for the purpose of responding to your inquiry.
Where cookies, analytics or other non-essential tracking technologies require consent, they are only activated after consent has been provided.
We may use the following service providers:
FastComet Inc. (website and email hosting; server location: Frankfurt am Main, Germany)
Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected or as required by applicable law.
For questions, requests or complaints concerning your personal information, contact:
Nicolas Matt
Email: hello@nicolas-matt.com
We may update this Privacy Policy when our services, website or applicable legal requirements change.
Website functions
This version uses no advertising trackers, no third-party analytics services and no externally loaded fonts. Opening the application form creates a necessary session cookie (nm_application) for request security. Submitted answers are sent by email; no application database is used. Abuse protection temporarily stores pseudonymous IP-based counters. Hosting and email services may process technical logs.
Cookie-free audience measurement
To understand which pages are read and how many visitors start and finish the Experience, we count page views with our own statistics running on our server. No cookies are set and nothing is stored on your device. We record: the page viewed, time, language, device type (smartphone, tablet, computer), screen width, the referring website or a source tag in the link, time on page and scroll depth, whether the notice about the Experience was shown or clicked, how far the Experience was completed and whether the application form was opened or sent. Your answers in the Experience and form contents are not transmitted. Your IP address is not stored: together with a random value that changes daily, IP address and browser identifier are turned into an irreversible short key; the random value is deleted after one day, so visitors cannot be recognised across days. The data is stored only on our server (FastComet, Frankfurt am Main), is not shared and is deleted after 13 months at the latest. The legal basis is our legitimate interest in data-minimising audience measurement (Art. 6(1)(f) GDPR). If your browser sends “Do Not Track” or “Global Privacy Control”, nothing is recorded.
Human Dashboard
Check-ins are saved in localStorage under nm-human-dashboard-v1 on your device when you save them. Existing entries are read when you open the dashboard. This version does not transmit these values to our server. Entries remain until the website data is cleared in your browser. There is no cross-device synchronisation.
Experience
The check at /experience (German) and /en/experience (English) stores your answers only locally on your device in localStorage (nm.experience.v1). The evaluation runs in your browser; your answers are not sent to our server. For the statistics (see audience measurement) only how far the check was completed is transmitted, not which answers you gave. Only if you then apply via “Apply now” is a short summary of the result (biggest lever, scores per life area, selected inner brakes and, if entered, your first name) sent to us by email together with your application. Local entries remain until you clear the website data in your browser. Whether you closed the notice about the Experience is also stored locally (nm.nudge.v1).
LEVERAGE app
The LEVERAGE app is available at app.nicolas-matt.com and, like this website, is hosted by FastComet. When you open it, the host processes technical log data in the same way as for this website (see “Hosting and technical logs”).
Everything you enter or test in the app, such as topics, finds, history and settings, is stored only locally in your browser (localStorage) on your device. This data is not transmitted to us or to third parties. There is no account, no tracking and no analytics. So that the app also works offline, a service worker stores the app files in your browser’s storage. You can delete stored data at any time in the app’s history or via your browser settings.
The optional read-aloud function uses the speech output of your browser or operating system. Depending on your device and the selected voice, a service of your browser or system provider may be involved.
Hosting and technical logs
Our hosting provider is FastComet Inc., 1201 North Market Street, Suite 111-N95, Wilmington, DE 19801, USA. The website and email server is located in Frankfurt am Main, Germany.
According to the provider, email logs are rotated weekly, retaining four weeks of archived logs in addition to the current active logs. Under the current cPanel Raw Access settings, archived SSL access logs are retained for the current calendar month; the previous month’s archives are removed at month end.
Hosting processor and international transfers
FastComet Inc., 1201 North Market Street, Suite 111-N95, Wilmington, DE 19801, USA, processes personal data as a processor to provide hosting and related services. For this website, this includes IP addresses, technical access and traffic data, and contact and communication data submitted through email or our coaching, workshop and speaking application forms.
According to FastComet’s DPA, third-country transfers are safeguarded through the European Commission’s Standard Contractual Clauses under Article 46 GDPR, Module 2 (Controller-to-Processor). FastComet uses subprocessors. Their general list does not mean that every listed service is used on this website. This website does not directly embed external analytics, advertising, CDN scripts or media players.
FastComet states that personal data is encrypted in transit and at rest, with TLS used by default for transmission.
Retention: service data and technical logs
The DPA states a retention period of 72 hours for communication content and traffic data in email services, and generally the duration of the service for other services unless deleted earlier. Separately, technical support reported weekly email-log rotation with four weeks of archives plus active logs. These statements cannot be combined into a single retention period without further clarification; the 72-hour period must not be understood as a deletion promise for every email, mailbox copy or log. The SSL access-log archive settings described above remain applicable.
Applications are sent through the contact form using the hosting server’s local PHP mail transport directly to the operator’s Gmail mailbox (Google), reviewed personally and, where applicable, followed up manually regarding participation and invoicing. This transmission is separate from FastComet’s hosting retention periods; copies in the receiving mailbox are not subject to an assumed 72-hour deletion period.