Privacy policy.

1. Controller

The controller responsible for processing of your data on this website is Steffen Happ — see the Imprint for full address details. Privacy questions: support@customer-cloud-gallery.com.

2. What we deliberately do not collect

• No advertising cookies and no re-targeting.
• No cross-site trackers or fingerprinting scripts.
• No newsletter signups, no signup forms, no account system.
• No analytics cookies without your consent — no analytics script loads before you click "Accept".

3. Hosting (All-Inkl)

This website is hosted on All-Inkl shared hosting in Germany. The web server writes standard access logs containing your IP address (anonymized after 7 days), request URL, referrer, user agent and a timestamp. Logs are kept for 14 days for security and error analysis (Art. 6 (1) (f) GDPR — legitimate interest in operating a working website).

4. Analytics — only with your consent

On your first visit a banner asks whether we may use analytics tools. Before you agree, none of these scripts load and no cookie is set. If you decline, the site stays entirely cookie-free. Your choice is stored locally in your browser (localStorage) — not as a cookie, and never transmitted to us.

You can withdraw or change your choice at any time via "Cookie settings" in the footer.

Google Analytics 4

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies and collects pages viewed, time on page, referrer, approximate location, device type and browser. We have enabled IP anonymisation, so your IP address is truncated. Transfer to the United States is possible; Google is certified under the EU-US Data Privacy Framework. See Google's privacy policy.

Hotjar

Provider: Hotjar Ltd., Dragonara Business Centre, Dragonara Road, St Julian's STJ 3141, Malta. Hotjar produces anonymised heatmaps and session recordings to show how pages are used (clicks, mouse movement, scroll depth, device and browser). Keystrokes in form fields are suppressed by default. See Hotjar's privacy policy.

Legal basis for both tools: Art. 6 (1) (a) GDPR (consent) and § 25 (1) TDDDG. No processing takes place without consent.

5. Spam protection on the contact form

The contact form is protected against spam entirely on our own server — there is no CAPTCHA and no third-party service involved. We use a hidden honeypot field (invisible to you, but filled in by automated bots) and a short-lived, per-IP rate limit. Your IP address is processed only momentarily for this rate limit and is not stored beyond that purpose. No data leaves our server for spam protection.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in keeping the form free of abuse).

6. Contact form mail

When you send a message via the contact form, we receive your name, email, topic and message via email at support@customer-cloud-gallery.com. We use this to reply to you. The data is stored in our mailbox for as long as we need it to handle your request and is deleted within 12 months after the conversation closes. We never share it with third parties for marketing purposes.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual / contractual measures) where you asked about Pro purchases, Art. 6 (1) (f) GDPR (legitimate interest) for general questions.

7. Pro purchase processing (Freemius)

Pro tier purchases are processed by Freemius Inc., a Delaware-based company that acts as our merchant of record. When you start checkout on the pricing page, you interact directly with Freemius. They receive your name, email, billing country and payment method to process the transaction and issue the invoice. Data transfer to the United States is covered by the EU-US Data Privacy Framework (DPF) certification of Freemius.

Legal basis: Art. 6 (1) (b) GDPR (contract performance).

8. Tutorial videos (YouTube no-cookie)

Some documentation pages embed tutorial videos hosted on YouTube. We use the youtube-nocookie.com domain and a two-click consent UI: the iframe is only loaded after you click play. Once you do, YouTube sees your IP and may set cookies — see Google's privacy policy.

Legal basis: Art. 6 (1) (a) GDPR (consent — given by your click).

9. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). You may also lodge a complaint with the supervisory authority of your country.

Send any of these requests to support@customer-cloud-gallery.com — we'll respond within 30 days.

10. Updates

If we add or change a service that processes user data, we update this page and bump the "last updated" date below. Material changes are also called out at the top of the page for at least 14 days.