// legal
Privacy policy
Last update: September 2026 · draft, to be reviewed by a lawyer before go-live
Privacy policies are about as exciting as a fund prospectus, and usually written by the same kind of people. The short version: this website sets no cookies, runs no analytics and loads nothing from third parties while you browse. Personal data is only processed when you send something – and then only to answer you.
1. Who is responsible
Markus Behmann
Dubai World Trade Centre
Sheikh Zayed Road
Dubai, United Arab Emirates
For privacy questions, use the contact page.
2. Hosting and server logs
This website is a static site hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) on Cloudflare Pages. When you visit a page, Cloudflare processes technical data such as your IP address, the requested URL, date and time, browser type and referrer in order to deliver the page and protect it against attacks. Legal basis: the legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU–US Data Privacy Framework.
3. No cookies, no tracking
There are no cookies, no analytics, no advertising pixels, no social media plugins, no embedded videos and no external fonts. Fonts and images are served from this domain.
4. Calculators and the Plan B course
The calculators run entirely in your browser. The numbers you enter are not sent anywhere. If you use “Copy link with my numbers”, the values are written into the part of the link after the #, which browsers do not send to servers.
Your course progress (completed levels, XP, ticked missions, quiz answers) is stored only in your own browser (localStorage). It never leaves your device. You can delete it with “Reset my progress” on the course page or by clearing your browser data.
5. Contact and speaking requests
When you use a form, the data you enter (name, e-mail address, your message, for speaking requests also company and date) is processed to answer your request. Legal basis: your request and steps prior to a contract (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) GDPR).
Form submissions are delivered by e-mail via Resend (Resend, Inc., USA) to a mailbox at Google Workspace (Google Ireland Ltd.). Resend also sends you a short confirmation. To keep bots out, the forms use a hidden field and, where enabled, Cloudflare Turnstile, which is only loaded when you start filling in a form.
Enquiries are deleted when they are no longer needed to answer you, unless statutory retention periods apply.
6. Waitlists
If you ask to be told when something is ready (Plan B Pro, books, podcast), your e-mail address and the topic are stored with the e-mail provider Resend (Resend, Inc., USA) and used for e-mails about that topic only. There is no newsletter. Legal basis: your consent (Art. 6(1)(a) GDPR). Unsubscribe any time via the link in every e-mail.
7. Links to other websites
This site links to other websites, among them nerdy.money and veonio.com. Their own privacy policies apply there.
8. Transfers outside the EU
The publisher is based in the United Arab Emirates. If you get in touch from the EU, your data is therefore processed outside the EU, for the purpose of answering your request (Art. 49(1)(b) GDPR). Cloudflare and Resend are based in the USA and are certified under the EU–US Data Privacy Framework.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence.
10. Changes
This policy is updated when the website or the law changes. The current version is always on this page.