Legal / 03

Privacy Notice

Last updated: 1 October 2026

1. Controller

The data controller for this website is Ata Özelbiçer, Klarafranke Straße 12, 10557 Berlin, Germany. You can contact us about privacy matters at +49 155 11090108 or via the contact details published on the About page.

2. Data we collect and why

  • Account data — name, email address, and login credentials, used to create and manage your account (legal basis: performance of a contract).
  • Support and submission messages — content you send us, including reference submissions, used to respond and to moderate submissions (legal basis: performance of a contract and legitimate interests).
  • Usage and technical data — device identifiers, IP address, and basic telemetry, used for security, fraud prevention, and product improvement (legal basis: legitimate interests).

Payment data is collected and processed by Paddle as Merchant of Record; we do not store your card details.

3. Who we share data with

  • Service providers and subprocessors that host and operate the service (hosting, analytics, support tooling);
  • Paddle, our Merchant of Record, for the sale of products, subscription management, payments, tax compliance, and invoicing;
  • Professional advisers (legal, accounting) where needed;
  • Authorities where required by law.

4. International transfers

Some of our service providers process data outside the EU/EEA. Where this happens, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. Retention

We keep personal data only as long as needed for the purposes above or as required by law (for example, tax records). When data is no longer needed, it is deleted or anonymised.

6. Your rights (GDPR)

You have the right to access, rectify, or erase your personal data; to restrict or object to processing; to data portability; and to withdraw consent at any time. We respond to requests within one month. You also have the right to lodge a complaint with your local data protection supervisory authority.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit and access controls, to protect personal data.

8. Cookies

We use essential cookies required for sign-in and security. Embedded YouTube videos use the privacy-enhanced youtube-nocookie.com domain. You can manage cookies through your browser settings.