Your data

Last updated: [date]

Who is responsible

[full name / business name], [postal address], [email].

What we keep, and why

• Your email address — to sign you in (we email a one-time link instead of using passwords) and to send receipts and notices about your subscription. Basis: the contract (Art. 6(1)(b) GDPR).
• Your subscription — plan, price, dates, payment results, and the confirmation that you are 18 or older and accepted the terms. Basis: the contract, and our legal duty to keep business records (Art. 6(1)(c) GDPR).
• Your card — we never receive or store card numbers. SumUp keeps the card and gives us a token and the last four digits, so that renewals can be charged.
• A sign-in cookie — one cookie that keeps you signed in for up to 60 days. It is strictly necessary for the service, so no consent banner is needed for it. We use no tracking or advertising cookies.

Who processes it for us

• SumUp (SumUp Payments Limited / SumUp Ltd.) — card payments.
• Cloudflare (Cloudflare, Inc.) — hosting of the site, the database and the photographs.
• Resend (Plus Five Five, Inc.) — sending the sign-in and subscription emails.
• Patreon — only if you choose to sign in with Patreon.

Some of them are based in the United States; transfers rely on the EU–US Data Privacy Framework or standard contractual clauses. [check each provider's current basis]

How long

While your subscription runs, and afterwards as long as tax law requires us to keep records of payments (in Germany up to 10 years). Sign-in links are deleted after a day.

Your rights

You can ask for a copy of your data, its correction or deletion, restrict or object to its use, and take it with you. Write to [email]. You can also complain to a data protection authority.