Privacy policy

Datenschutzerklärung

1. Controller

Tollstadt, Mohamed Masoud, Kadenstr. 29, 01237 Dresden, Germany. Email: [email protected], phone +49 15511 407069.

2. Visiting the website

The website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When you open a page, the server processes technical data such as your IP address, date and time, the page requested and your browser type, so that the page can be delivered and the server kept secure (Art. 6 (1) (f) GDPR). We have a data processing agreement with the host.

Requests to the website pass through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, which protects the site against attacks and delivers it faster (Art. 6 (1) (f) GDPR). Cloudflare processes your IP address and technical request data for this. Cloudflare uses the EU standard contractual clauses and takes part in the EU-US Data Privacy Framework. See cloudflare.com/privacypolicy.

This website uses no tracking or analytics tools and loads no fonts or scripts from other companies. It sets one cookie only when you log in (see section 3). Write-and-draw work in play mode is stored in your own browser (local storage) and is not sent to us unless you have a subscription.

3. Subscription and account

Payments are handled by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. On Stripe's payment page you enter your payment details. Stripe processes this data to carry out the payments and to prevent fraud. Stripe may also transfer data to Stripe, Inc. in the USA; Stripe uses the EU standard contractual clauses and takes part in the EU-US Data Privacy Framework. See stripe.com/privacy. We do not receive your card details.

For your account we store: your email address, your Stripe customer id and subscription id, the status of the subscription and the end of the paid month, the time of your agreement to the immediate start of access, and the dates of your cancellation requests. We need this to provide the subscription, to let you log in and to prove the contract (Art. 6 (1) (b) and (c) GDPR).

Login cookie: when you log in, we set a cookie named "bx" that holds a random id, so that you stay logged in on this device for up to 365 days. This cookie is necessary for the service you asked for, so no consent is needed (§ 25 (2) no. 2 TDDDG). Log out on your account page to remove it.

Saved work: if you have a subscription, your write-and-draw work in play mode (lines, typed answers, stickers, pages marked as done) is stored on our server in your account, so that it is there on every device (Art. 6 (1) (b) GDPR).

Account data and saved work are stored until you ask us to delete your account. Data we must keep under commercial and tax law (for example payment records) is kept as long as that law requires (up to 10 years).

4. Emails

We use your email address only to send login links, the confirmation of your subscription and of a cancellation, and to answer your questions. We do not send newsletters or advertising.

5. Limits against misuse

To prevent misuse of the login, subscription and cancellation forms and of the downloads, we store a coded value (hash) of your IP address, email address or account for up to 24 hours to limit the number of requests (Art. 6 (1) (f) GDPR).

6. Your rights

You have the right to access, correction, deletion, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). To use them, write to the email address above. You can also complain to a data protection supervisory authority, for example the Saxon Data Protection Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte).