Legal
Privacy policy.
DRAFT — pending legal review. The technical descriptions below are accurate to what the software does. The legal framing, the controller identification and the retention periods still need a lawyer’s eye before launch.
Who is responsible
TODO — Controller’s name and address, matching the Impressum. Under GDPR Art. 13 this has to be stated here as well, not only there.
What we collect, and why
Your email address, because sign-in works by emailing you a six-digit code — there is no password to store, and no password is ever stored. Your orders, because we are legally required to keep invoices. Your downloads, so your library works and so we can tell whether a file was retrieved before a refund request. A billing name and country when you give them, because VAT depends on where you are. Nothing here is sold, and nothing is used for advertising.
Cookies
Three, and no third-party tracking of any kind — no Google Analytics, no advertising pixel, no session recording.
| Cookie | Purpose | Lifetime | Consent |
|---|---|---|---|
ma_session | Keeps you signed in. | 30 days, max 90 | Strictly necessary — exempt |
ma_vid | An anonymous visitor id, used to count what is popular. Not linked to your account. | 1 year | Requires your consent |
ma_aff | Remembers which affiliate referred you, so they are credited. | 30 days | Requires your consent |
Who else sees your data
Only the services needed to run the shop: Stripe for payments (we never see or store your card details), Resend for email, Cloudflare for file storage and bot protection, and Vercel and Supabase for hosting and the database. Each is a processor acting on our instructions. TODO — list each one’s legal basis and location, and confirm the data-processing agreements are in place.
How long we keep it
Invoices and booking records for ten years, because §147 AO and §257 HGB require it. Sign-in codes for ten minutes. Sent emails for 90 days, and emails containing a sign-in code for 24 hours. Everything else until you ask us to erase it.
Your rights
You can download everything we hold about you, and you can erase your account, from your settings page. Erasure removes your profile, reviews, cart, sessions, download history and loyalty balance immediately. It anonymises rather than deletes your invoices — we are legally required to keep those, so they stay as records with no link back to you. If you are an affiliate with unpaid commission owing, we ask you to settle that first, because we cannot pay someone we have anonymised.
You also have the right to rectification, to restrict processing, to object, and to complain to a supervisory authority. TODO — name the competent authority for the operator’s state.