Privacy policy
Draft: complete this and have it legally reviewed before launch.
Controller
[name, address, email address]
Account and login
For your account we store your email address and, if you sign in with Google, the account data needed for that. Login runs on Supabase. [add server region and data processing agreement]
Purchase
[payment provider] handles payment. We receive the order number and payment status, but no payment details. We also store your consent to immediate delivery, with its date and wording.
License and downloads
Every paid file carries a personal license ID. We log when you access which file and limit daily downloads to detect misuse and sharing. [add legal basis and retention period]
Newsletter
You only receive the newsletter if you subscribe yourself and confirm by email. You can unsubscribe anytime. [add newsletter provider]
Cookies
We only use cookies that are technically required for login. We don't use tracking.
Hosting
[add hosting provider and server logs]
Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection, and the right to complain to a supervisory authority. Contact us at [email address].