Privacy Policy

Hosting

• This website is hosted on Vercel. Server logs (IP address, request metadata) are processed as part of normal hosting operations.

Database and account services

• Supabase — stores account data (email, hashed password or login code, order history) and service configuration. Personal Data: email address; account/order records.

Analytics (only with your consent)

• PostHog — product analytics (page views, feature usage). Only active if you accept the "Analytics" cookie category in the cookie banner. Personal Data: Cookies; Usage Data.

Advertising (only with your consent)

• Conversion/remarketing tracking, where enabled. Only active if you accept the "Marketing" cookie category in the cookie banner. Personal Data: Cookies; Usage Data.

Live chat support

• A live chat widget (Chatwoot, which we self-host) is used to answer support questions. Personal Data: messages you send in chat; email address, if you provide one.

AI-assisted customer support

• Support conversations, in live chat and by email, are handled in Chatwoot, which we self-host on our own server in Germany (Hetzner, Nuremberg). Replies are drafted by an automated assistant: the content of your message, the recent conversation, your email address and relevant verified order information are sent to OpenAI (United States) to classify the request and generate the reply. Those data may be processed outside the EEA, including in the United States, under appropriate safeguards such as the Standard Contractual Clauses where applicable. Our automation's execution logs are retained for no longer than 7 days; OpenAI may retain abuse-monitoring logs under its applicable data controls and terms, while the conversation itself remains in Chatwoot. The assistant provides information and routes requests, but cannot itself execute refunds, refills or cancellations; requests requiring action are handled by our team, and you can ask to be put in touch with a person at any time. Personal Data: messages you send in chat or by email; email address; order references.

Transactional email

• Login codes, order confirmations and account notifications are sent through our backend infrastructure, which delivers email via Amazon SES. Personal Data: email address; message content.

Order fulfillment

• If you place an order, the public link/username you provide is forwarded to our fulfillment provider to deliver the service. We do not ask for or store your social media password.

Payment processing (only if you place an order)

• Payments are handled by our payment service providers. We do not store your full card number; the provider processes payment data under its own privacy policy.