$160M VC-backed company just killed my EU trademark for a small OSS project

I run a small open-source project Deepkit (Trademark 017875717) I've been building for many years. It's not huge, just a few thousand users compared to the big OSS names, but to me it was worth protecting, so I trademarked the name in the EU and US a few years back. I had hoped to be protected from other corporations this way and live peacefully.

A $160M-funded company named Deepki (Trademark 1751952) came along and filed for cancellation at EUIPO since they needed the trademark now after getting lots of funding. They won. Now my trademark is gone.

The frustrating part? The EU actually does allow open-source (even free projects) to have trademarks, but you have to prove "genuine use" in the EU for the goods/services your trademark covers. Which seems to force you in collecting user sensitive data otherwise you are entirely unable to prove that you have actual users in the EU. I generally try to collect as little information as possible (also because I don't care where my users are coming from). I had google analytics running for some time on the main page (not documentation), but most of the time it didn't work and it seems most of my users block it anyway.

Here's what I gave the EUIPO and why they said no:

- Google Analytics for my site with a full country breakdown from 2018–2023. A few hundred to ~1,800 EU visitors per year per country. They said that’s "too small" to count as real commercial exploitation for my Class 9 software. Also, they said they couldn’t tell which goods those visits were actually for.

- npmjs + GitHub stats - hundreds of thousands of downloads and thousands of stars. Rejected because there's no location data, so they couldn't confirm if the usage was in the EU. In some cases, they said the timeframes weren't even clear.

- They basically kept repeating that they couldn't clearly link any of the usage to the specific goods/services my trademark was registered for.

The conclusion:

>Conclusion: It follows from the above that the EUTM proprietor has not proven genuine use of the contested mark for any of the goods and services for which it is registered. As a result, the application for revocation is wholly successful and the contested European Union trade mark must be revoked in its entirety. According to Article 62(1) EUTMR, the revocation will take effect from the date of the application for revocation, that is, as of 18/03/2024.

>COSTS: According to Article 109(1) EUTMR, the losing party in cancellation proceedings must bear fees and costs incurred by the other party.

They even admitted there's no strict minimum for usage, and free software can count, but in their eyes my EU traffic was too low and not clearly tied to the trademarked goods.

I also have the US trademark for the name. This same company tried to register in the US around 2022 (Trademark #79379273) and got blocked because it was too similar (decision made by USPTO). But a few months ago they somehow got it registered there too (Trademark #7789522), not sure how they did that now.

Now I'm sitting here wondering:

- Is it even worth getting a second opinion and appealing in the EU? I mean the project is very small.

- Should I fight the US registration?

- Or should I just walk away from trademarks altogether for my open-source projects. I lost so much money because of this already.

- And for OSS projects in general, is there even a practical, privacy-friendly way to prove EU usage without generating revenue?

- Is it even worth holding the trademark if proving EU usage is this brittle for OSS? If the trademark can be deleted just like that even after spending a few thousands dollars on lawyers. Probably a skill issue, but still, damn.

It sucks to lose the name I've been building for years to a corporation with $160M behind them, especially when this is just a side project I do in my spare time, and to them I'm a nobody. If nothing else, maybe my case can be a cautionary tale for other OSS maintainers.