Privacy Policy

Hosting

• This website is hosted on Vercel. Server logs (IP address, request metadata) are processed as part of normal hosting operations.

Database and account services

• Supabase — stores account data (email, login code, order history) and service configuration. Personal Data: email address; account/order records.

Analytics

• PostHog and Google Analytics — product and traffic analytics (page views, feature usage). Consent is requested where required by applicable law. Personal Data: Cookies; Usage Data.

Advertising and measurement

• Meta (Facebook) browser pixel and server-side conversion measurement — advertising attribution and remarketing. Browser tracking follows your cookie choice where consent is required; first-party identifiers and event data may also be processed server-side for measurement. Personal Data: Cookies and first-party identifiers; Usage Data; IP address and device metadata; conversion and order events.

Live chat support

• A live chat widget (Chatwoot, which we self-host) is used to answer support questions. Personal Data: messages you send in chat; email address, if you provide one.

AI-assisted customer support

• Support conversations, in live chat and by email, are handled in Chatwoot, which we self-host on our own server in Germany (Hetzner, Nuremberg). Replies are drafted by an automated assistant: the content of your message, the recent conversation and relevant order information may be sent to OpenAI (United States) to classify the request and generate the reply. Those data may be processed outside the EEA, including in the United States, under appropriate safeguards such as the Standard Contractual Clauses where applicable. The automation's processing logs are retained for no longer than 7 days; OpenAI may retain abuse-monitoring logs under its applicable data controls and terms, while the conversation itself remains in Chatwoot. The assistant provides information and routes requests, but cannot itself execute refunds, refills or cancellations; requests requiring action are handled by our team, and you can ask to be put in touch with a person at any time. Personal Data: messages you send in chat or by email; email address; order references.

Transactional email

• Login codes, order confirmations and account notifications are sent through our backend infrastructure and delivered via Amazon SES. Personal Data: email address; message content.

Order fulfillment

• If you place an order, the public link or username you provide is forwarded to our fulfillment infrastructure to deliver the service. We do not ask for or store your social media password.

Payment processing (only if you place an order)

• Payments are handled by our payment service providers (Finby, Cardinity, Whop and, for crypto payments, Cryptomus). We do not store your full card number; each provider processes payment data under its own privacy policy.