Privacy Policy
In short: the pages of this website load without cookies and without analytics. Google Analytics and Metricool only run in your browser if you agree in our privacy banner (completed orders are reported to it by our server without accessing your device, see section 5), YouTube videos only load when you click them, and the online store (FastSpring) only loads on pages where you can buy something or when you open the cart. The fonts are served from our own server. Here is what is processed and why.
1. Controller
Stefan Kohler
Bauerngasse 42
97702 Münnerstadt
Germany
Email: [email protected]
2. Hosting (Cloudflare)
This website is delivered through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open a page, Cloudflare processes technically necessary connection data (e.g. IP address, date and time of access, page requested, browser type) to deliver the website, secure the connection and fend off attacks.
The legal basis is our legitimate interest in a secure and reliable operation of the website (Art. 6 (1) (f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement with EU standard contractual clauses is in place with Cloudflare. More information is available in Cloudflare’s privacy policy.
3. Customer account, licenses and downloads
The customer account (/account/), license verification and downloads of purchased software run on our own server. You sign in with a one-time 6-digit code that we send to your email address. When you sign in, we process your account data (name, email address, purchased licenses) to provide your licenses and downloads (Art. 6 (1) (b) GDPR).
When you download a file from your account, we record which product and version you downloaded, when, for which platform, and your browser’s user agent, together with your account. We use this to support you (for example, to see which version you have) and to evaluate how our products are used. Legal basis: Art. 6 (1) (b) GDPR and our legitimate interest in improving our products (Art. 6 (1) (f) GDPR). These records are kept as long as your customer account exists and are deleted with it.
For signing in, the customer account sets two technically necessary cookies: one while you enter the sign-in code and one for your account session. Both are deleted when you sign out or when they expire (§ 25 (2) no. 2 TDDDG). Hosting provider and location of this server, server log files and their retention period: to be added.
4. Your privacy choice (consent banner)
We store your choice in the banner in your browser’s local storage (key “it-consent-v1”), so we do not have to ask again. No cookie is used for this. You can change or withdraw your choice at any time via “Privacy settings” at the bottom of every page. Legal basis: § 25 (2) TDDDG and Art. 6 (1) (c) GDPR (documenting consent).
5. Google Analytics 4 (in your browser only with your consent)
If you click “Accept statistics” (or select Statistics and save), we use Google Analytics 4 (measurement ID G-0B5YYKMHFX), a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Before you agree, no Google Analytics script is loaded, no request is sent to Google and no analytics cookie is set.
We use Google Consent Mode v2: after your consent only analytics storage is enabled; advertising storage, ad user data and ad personalization stay switched off. Google Analytics sets cookies (“_ga”, “_ga_0B5YYKMHFX”) and measures page views and these interactions: clicks on “Add to Cart” and on “Checkout” in the cart (products, price and currency), on product tiles and the Infinite Nodra call to action, on links to partner sites, file downloads and starting a video. So that a completed order can be assigned to your visit, we also attach the Google Analytics client ID and session ID from these cookies to your FastSpring cart (as order tags); FastSpring passes them back to our server with the order (see below). Google Analytics 4 does not log or store full IP addresses. The data is kept for 14 months.
Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. Legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You can withdraw it at any time with effect for the future via “Privacy settings”; we then switch analytics off and delete the Google Analytics cookies of this website. More information: Google’s privacy policy.
Completed orders (sent by our server)
When an order is completed, FastSpring notifies our server, and our server reports the order to Google Analytics 4 (Measurement Protocol) – whether or not you agreed to statistics. Only this is transmitted: the order reference, the products (name, ID, quantity, price, discount), the order value without tax, the tax, the currency and a coupon code if one was used. Free licenses (for example the Infinite Nodra Player) are reported as a separate event without a value. No name, email address, postal address, payment details or IP address of the buyer is sent, and advertising signals are switched off. If you agreed to statistics, the order is linked to your visit via the client ID and session ID described above; otherwise our server uses a random ID that cannot be linked to you or your device. For this nothing is read from or stored on your device.
Purpose: complete sales statistics (which products sell, which pages lead to a purchase), which the browser alone cannot provide because of blocked scripts and declined banners. Legal basis is our legitimate interest in this evaluation (Art. 6 (1) (f) GDPR). Recipient, transfer to the USA and storage period are the same as above. You can object at any time (Art. 21 GDPR) with an informal email to the address in section 11, naming your order reference; we will then delete the data of that order in Google Analytics.
Metricool (only with your consent)
With the same consent (“Statistics”) we also use the web analytics of Metricool, a service of Metricool Software S.L., [address of Metricool Software S.L., Spain]. Before you agree, no Metricool script is loaded and no request is sent to Metricool. After your consent your browser loads a script from tracker.metricool.com, which records page views (page address, referring page, browser and device type) so that we can see which pages and channels, for example our social media posts, bring visitors to this website. Legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG); you can withdraw it at any time via “Privacy settings”, from the next page view on Metricool is no longer loaded. More information: Metricool’s privacy policy.
6. Online store (FastSpring)
Our products are sold by FastSpring as reseller (merchant of record): FastSpring Inc., [legal entity and address of FastSpring]. FastSpring processes the data you enter during checkout (e.g. name, email address, billing address, payment details) to carry out your order, payment and invoicing, and sends you your license key. Legal basis is the performance of the contract (Art. 6 (1) (b) GDPR); for FastSpring’s own processing, FastSpring’s privacy policy applies.
The FastSpring Store Builder only loads on pages with buy buttons (product pages, Infinite Nodra and “All products & prices”); the cart icon on other pages leads to “All products & prices”. When it loads, it stores an identifier for your cart session in your browser’s local storage (key “fscSerial-rawexchange.onfastspring.com/popup-infinite-tools”), so the cart keeps its content while you browse. This is necessary for the cart to work (§ 25 (2) no. 2 TDDDG). It contacts rawexchange.onfastspring.com, d1f8f9xcsvx3ha.cloudfront.net, d8y8nchqlnmka.cloudfront.net and cdnjs.cloudflare.com; your IP address and browser data are transmitted to these servers. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual steps) and our legitimate interest in a working online store (Art. 6 (1) (f) GDPR).
7. YouTube videos (only after a click)
Videos are shown as a preview image first. Only when you click a video is it loaded from youtube-nocookie.com, a service of Google Ireland Limited (address see above). From then on Google receives your IP address and the information that you watched the video, and may store data in your browser. Legal basis is your consent by clicking (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). See Google’s privacy policy.
8. Contact
If you write to us by email, we process your details (email address, name, content of the message) only to handle your request. Legal basis is Art. 6 (1) (b) GDPR (initiation or performance of a contract) or Art. 6 (1) (f) GDPR (legitimate interest in answering your message). We delete the data as soon as it is no longer needed for this purpose and no statutory retention obligations apply.
Our support page currently offers contact by email only. If a contact form is added, this section will be updated.
9. Cookies, local storage, fonts
On the pages of this website, apart from Google Analytics and Metricool (only with consent; completed orders are reported by our server without accessing your device, see section 5), YouTube (only after a click) and FastSpring (local storage entry for the cart, only on pages with buy buttons), no cookies are set, nothing else is written to your device except your privacy choice (see section 4), and no content is loaded from third-party servers. The fonts are loaded from this website – there is no connection to Google Fonts or other font services.
10. Encryption
All connections to this website are encrypted via TLS (HTTPS).
11. Your rights
Under the GDPR you have the right to:
- access the data stored about you (Art. 15),
- rectification of incorrect data (Art. 16),
- erasure (Art. 17) and restriction of processing (Art. 18),
- data portability (Art. 20),
- object to processing based on legitimate interests (Art. 21),
- withdraw a consent at any time with effect for the future (Art. 7 (3)).
An informal email to [email protected] is enough.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
12. Changes
If something on this website changes – for example a form that transmits data directly – we will update this policy accordingly. The version published here applies.