Datenschutz · Privacy

Controller: [FILL IN: name, address, email]. Data protection contact: [FILL IN].

Data we process

Sellers: email, password (hashed), store link, profile, uploaded files, sales, and the ID of their Stripe account (identity and bank details are given to Stripe directly, not to us). Buyers: email, optional name, purchase, download history. Everyone: IP address and browser data in server logs.

Purposes and legal basis

Running the store and processing orders (Art. 6(1)(b) GDPR). Security and fraud prevention (Art. 6(1)(f)). Advertising measurement only with consent (Art. 6(1)(a), § 25 TDDDG).

Ad tracking

Sellers can connect Meta, TikTok and Google. Their pixels, our attribution cookie and the matching server-side events (Meta Conversions API, TikTok Events API, Google Analytics) are only used after you click "Yes" in the cookie banner. Without consent nothing is sent to these platforms. Emails are sent only as hashes. You can withdraw consent by deleting the cookie "aos_consent".

Processors

Stripe (payments), Cloudflare (network), [FILL IN: hosting provider and location], Resend (email). Meta, TikTok and Google only with consent; data may be transferred to the USA under the EU-US Data Privacy Framework.

Retention

Account data until deletion; order data as required by tax law (up to 10 years); server logs [FILL IN: days].

Your rights

Access, correction, deletion, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority. Contact: [FILL IN: email].