Privacy Policy

Information on the processing of personal data under Art. 13 GDPR.

1. Controller

The controller responsible for data processing on this site is the operator listed in the Imprint.

2. Data we process

• Account data: email, hashed password, display name.
• Subscription records you create: vendor, amount, renewal date, notes.
• Billing data when you upgrade (processed by Stripe as a separate controller).
• Email delivery logs for renewal alerts (processed by Lettermint as a processor).
• Technical logs: IP, user-agent, request path, timestamps, stored up to 30 days.
• Marketing-site analytics via Wolf Analytics in GDPR mode: page views, technical usage data, performance data, errors, AI crawler hits, and interactions such as button clicks.

3. Purposes and legal bases

• Providing the service (Art. 6(1)(b) GDPR — performance of contract).
• Security and abuse prevention (Art. 6(1)(f) GDPR — legitimate interest).
• Privacy-preserving marketing-site analytics (Art. 6(1)(f) GDPR — legitimate interest).
• Billing (Art. 6(1)(b) GDPR).
• Renewal alerts and transactional email (Art. 6(1)(b) GDPR).

4. Recipients and processors

• Hosting: [Hosting provider].
• CDN / DNS: Cloudflare, Inc. (USA) — SCCs in place.
• Analytics: Wolf Analytics, used in GDPR mode without marketing cookies.
• Email delivery: Lettermint.
• Payments: Stripe Payments Europe, Ltd. (Ireland).
• Registrar integrations (only if you connect them): GoDaddy, Namecheap — credentials stored encrypted at rest.

5. Retention

Account and subscription data are retained until you delete your account. Billing records are kept for the legally required retention period (up to 10 years under § 147 AO for German operators). Technical logs are kept up to 30 days.

6. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21). You may lodge a complaint with a supervisory authority (Art. 77 GDPR).

7. Cookies

We use strictly necessary cookies to keep you signed in (Auth.js session cookie). Wolf Analytics does not set marketing cookies on the marketing site; for page-view continuity during one browser session, session storage may be used. No tracking or marketing cookies are set without your explicit consent.

8. Contact

For privacy requests, email [email protected].

Last updated: 2026-04-22