Privacy policy.

1. Controller

The controller responsible for processing of your data on this website is Steffen Happ — see the Imprint for full address details. Privacy questions: support@customer-cloud-gallery.com.

2. What we deliberately do not collect

• No marketing cookies — none.
• No cross-site trackers or fingerprinting scripts.
• No newsletter signups, no signup forms, no account system.
• No re-targeting or advertising pixels.

3. Hosting (All-Inkl)

This website is hosted on All-Inkl shared hosting in Germany. The web server writes standard access logs containing your IP address (anonymized after 7 days), request URL, referrer, user agent and a timestamp. Logs are kept for 14 days for security and error analysis (Art. 6 (1) (f) GDPR — legitimate interest in operating a working website).

4. Analytics (Plausible)

We use Plausible Analytics, a cookieless, privacy-friendly analytics provider operated from the EU. Plausible collects anonymous, aggregated usage data: page URLs, country (from IP, then discarded), referrer, device type and browser. No cookies are set. Personal data cannot be inferred from the collected data.

5. Spam protection on the contact form

The contact form is protected against spam entirely on our own server — there is no CAPTCHA and no third-party service involved. We use a hidden honeypot field (invisible to you, but filled in by automated bots) and a short-lived, per-IP rate limit. Your IP address is processed only momentarily for this rate limit and is not stored beyond that purpose. No data leaves our server for spam protection.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in keeping the form free of abuse).

6. Contact form mail

When you send a message via the contact form, we receive your name, email, topic and message via email at support@customer-cloud-gallery.com. We use this to reply to you. The data is stored in our mailbox for as long as we need it to handle your request and is deleted within 12 months after the conversation closes. We never share it with third parties for marketing purposes.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual / contractual measures) where you asked about Pro purchases, Art. 6 (1) (f) GDPR (legitimate interest) for general questions.

7. Pro purchase processing (Freemius)

Pro tier purchases are processed by Freemius Inc., a Delaware-based company that acts as our merchant of record. When you start checkout on the pricing page, you interact directly with Freemius. They receive your name, email, billing country and payment method to process the transaction and issue the invoice. Data transfer to the United States is covered by the EU-US Data Privacy Framework (DPF) certification of Freemius.

Legal basis: Art. 6 (1) (b) GDPR (contract performance).

8. Tutorial videos (YouTube no-cookie)

Some documentation pages embed tutorial videos hosted on YouTube. We use the youtube-nocookie.com domain and a two-click consent UI: the iframe is only loaded after you click play. Once you do, YouTube sees your IP and may set cookies — see Google's privacy policy.

Legal basis: Art. 6 (1) (a) GDPR (consent — given by your click).

9. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). You may also lodge a complaint with the supervisory authority of your country.

Send any of these requests to support@customer-cloud-gallery.com — we'll respond within 30 days.

10. Updates

If we add or change a service that processes user data, we update this page and bump the "last updated" date below. Material changes are also called out at the top of the page for at least 14 days.