Privacy Policy (GDPR)

There is no cookie banner on this website. Because I do not collect data for the big tech companies: no Google Analytics, no third-party tracking scripts, no advertising cookies. Nor am I working on behalf of AI companies, hoovering up data from the real world to hand over to them.

Wherever I run ads, I measure exactly one thing: whether an ad led to a purchase. But there is no cookie tracking, no profiling and no behavioural analysis on this website. Whatever else remains technically necessary, I disclose below.

Not one second of your lifetime should go into clicking banners away or, heaven forbid, "setting them individually."

Controller within the meaning of data protection law (Art. 4 No. 7 GDPR)

If you have questions about your personal data — access, rectification, blocking, erasure — please contact us:

Contact for data protection enquiries

Email:

Legal notice

The legally binding version of this privacy policy is the German one.

Server log data when you visit this website

When you use our website, our hosting provider die netztaucher GmbH (Am Gutshof 36, 16278 Angermünde, Germany) collects the usual server log data: IP address, date and time of the request, content of the request, access status/HTTP status code, amount of data transferred, referring website, browser type and version, operating system and language.

This data arises for technical reasons as the page is delivered. It is not collected via cookies, not evaluated for statistical purposes and not combined with any other data. It is stored for a maximum of 30 days and serves solely to provide, secure and stabilize the website. A data processing agreement is in place with the provider.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
netztaucher privacy policy: https://netztaucher.com/datenschutz

Routine erasure and blocking of personal data

Personal data is stored only as long as necessary for the respective purpose or as required by law. After that, it is routinely deleted or blocked.

Use of cookies

We set no cookies for analytics, advertising or statistical purposes. Your behaviour on this website is not recorded, you are not recognised on your next visit, and no profiles are created.

On the sales pages, exactly one cookie is set (ds24c.v1), and it is set by the script of our reseller Digistore24. It is technically necessary for processing your purchase — details in the next section.

On the support page our contact form sets two further cookies (PHPSESSID and mf_has_cookie). They come from our own form server, keep your form session together and are technically necessary for the form to work — details in the section "Contact form (support)". On all other pages no cookie is set.

Web analytics with Matomo (self-hosted, cookie-free)

This website uses the open-source software Matomo to analyze page visits in anonymized form. Matomo is installed locally on our own server and does not set any cookies. IP addresses are stored in anonymized form; identifying individual visitors is not possible. Your browser's "Do Not Track" setting is respected. No data is passed on to third parties. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in measuring the reach of our website).

Digistore24: reseller, payment processing and affiliate program

Our digital products are not sold by us but by Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany. Digistore24 acts as an authorized reseller: Digistore24 is your contractual partner when you buy, handles the order, the payment and the invoice, and remits the applicable sales tax. In doing so, Digistore24 acts as an independent controller within the meaning of the GDPR. Access to your product also comes from Digistore24 — via the order confirmation and the thank-you page after your purchase.

For this sale to work technically, our sales page embeds a script from Digistore24. It prepares the purchase and attributes orders to the right partner (affiliate) and to any discount codes. To do so, it sets the cookie ds24c.v1; the same value is additionally stored in your browser's session storage (sessionStorage), which is cleared when you close the browser. Since the entire purchase runs through Digistore24 as the reseller, both are technically necessary for the service you asked for; it falls under the exception in Section 25(2) No. 2 TDDDG (the German data protection act for telecommunications and digital services, which implements the EU ePrivacy Directive) and is therefore loaded without prior consent. It does not serve advertising and does not analyze your behavior.

As soon as you click an order button, you leave our website and arrive at the Digistore24 order form (checkout-ds24.com). There, Digistore24 sets further cookies as its own controller; they are required to process the purchase, among other things to identify the product and the session. We have no influence over those cookies; the Digistore24 privacy policy applies to them.

Our sales page also displays a Digistore24 trust badge. To show it, the page loads a script from digistore24.com, which in turn loads two further files from the same provider. As with any file loaded from an external server, your IP address is transmitted to Digistore24 in the process. The badge itself sets no cookies. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in showing that the payment process of our reseller is certified.

Further information on data processing by Digistore24: https://www.digistore24.com/page/privacy

Conversion tracking (Google Ads)

If you reach our website through a paid Google ad, the address contains a click identifier (gclid). When you click an order button, this identifier is passed on to our reseller Digistore24 and reported back to us as soon as an order is placed.

We then report to Google Ads that a purchase followed that ad click. Only the click identifier, the time and the purchase amount are transmitted — no names, no email addresses, no other customer data. This tells us which ad led to a sale.

No cookie is set for this and no Google script is loaded. The identifier exists only in the address you called up; it is not stored, and without a click on an order button it is not transmitted anywhere. There is no cross-site recognition and no profiling.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring the success of our advertising).

Contact form (support)

We provide a form for support requests. It runs on our own server (timdaugs.com) — the form software is self-hosted, so what you type does not go to an outside form provider. When you open the support page the form is loaded from there, which transmits your IP address to our own server, as any page request does. Nothing goes to Google or any other third party.

The form sets two cookies: PHPSESSID keeps your form session together and is deleted when you close your browser; mf_has_cookie checks whether your browser accepts cookies and expires after one day. Both are technically necessary for the form to work, serve neither advertising nor analytics, and fall under the exemption in Section 25(2) no. 2 TDDDG; no consent is required for them.

If you would rather not use the form, write to us by email instead (address on the support page and in the legal notice).

Legal basis for providing the form: Art. 6(1)(f) GDPR (legitimate interest in a working contact route protected against misuse). Legal basis for handling your request: Art. 6(1)(b) GDPR.

Handling your request (Help Scout)

Requests you send arrive in our CRM system Help Scout Inc., 131 Tremont St, Boston, MA 02111, USA, so that we can answer them and follow the history. Help Scout sets no cookies on this website — the service only comes into play once you have submitted the form. A data processing agreement under Art. 28 GDPR is in place with Help Scout; Help Scout is certified under the EU-US Data Privacy Framework, and in addition the transfer to the USA is safeguarded by EU Standard Contractual Clauses.

Artificial intelligence: The AI feature of Help Scout is switched off in our account. Your requests are not handed to Help Scout's AI services. Where we use AI to formulate replies, we do so exclusively with models running locally on our own machines. No content is transmitted to external AI providers or onto the internet in the process.

Legal basis: Art. 6(1)(b) GDPR. Help Scout privacy policy: https://www.helpscout.net/company/legal/privacy

If you would rather not use Help Scout, you can reach us by email or by post.

Processing of your order data on our server

In order to process your order technically, the order data transmitted by Digistore24 — name, postal address, email address, product purchased and date of purchase — is briefly processed on a server operated by us before being passed on to our email system.

The server is hosted with Amazon Web Services (AWS) in a data centre in Frankfurt am Main, Germany. AWS processes the data exclusively on our behalf, on the basis of a data processing agreement under Art. 28 GDPR. AWS does not process it for its own purposes. No personal data is transferred to third countries in the process.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in handling order processes securely, automatically and without errors.

Emails after your purchase (Drip)

When you buy one of our products, we add your email address to our email system Drip (Avenue 81, Inc., 100 S 5th St, Minneapolis, MN 55402, USA) in order to send you support information and news about our products.

No Drip script runs on this website. There is no signup form here; all Drip receives from us is your purchase data. Your behavior on this website is not recorded.

Tracking pixel and link measurement in our emails: Our emails contain a small, invisible image (a tracking pixel) that tells us whether and when an email was opened. In addition, the links in our emails are rewritten: your click first passes through a server of our email system Drip, is counted there, and is then forwarded to the actual destination. We use both to see which information is getting through and what interests you.

You can prevent the tracking pixel by switching off the automatic loading of images in your email program — then it is not loaded and we learn nothing about the opening. The link measurement you can only avoid by not clicking the links in our emails; you can reach the destination pages directly via our website at any time instead.

Legal basis for measuring openings and clicks: Art. 6(1)(f) GDPR (legitimate interest in measuring how well our emails perform). You may object to this at any time — informally to us or via the unsubscribe link in every email.

We have agreed data processing with Drip under Art. 28 GDPR; Drip is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR), supplemented by the EU Standard Contractual Clauses. Your data is used there solely to send emails to you — not for third-party advertising, not for analytics.

Legal basis: Art. 6(1)(b) GDPR (performance of the contract) and Art. 6(1)(f) GDPR (direct marketing to existing customers under Section 7(3) of the German Act against Unfair Competition, UWG). You may object to receiving these at any time — via the unsubscribe link in every email or informally to us.

Audio sample (Amazon Web Services)

The audio sample on our sales page is hosted at Amazon Web Services (AWS) and delivered via its CloudFront delivery network. It is not loaded until you click "Play" — before that, no connection to Amazon is made and none of your data is transmitted.

During playback, AWS processes your IP address, your browser identification, the file requested and the time and volume of the request, for technical reasons. The recording is transmitted in short sections of about ten seconds, so many individual requests arise instead of a single one. This is the same information as with an ordinary request — it simply occurs more often. No cookies are set.

The recording is stored in a data centre in Ireland and delivered from the network location nearest to you — European locations for visitors from Europe, North American ones outside Europe. In the process, the address the request comes from (the referrer) is checked; requests that do not originate from our website are refused. Your browser sends this information with every request anyway; it serves to protect our content from being embedded elsewhere and is not stored beyond that.

The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. A data processing agreement under Art. 28 GDPR is in place with them, supplemented by the EU Standard Contractual Clauses under Art. 46 GDPR; the US entity is additionally certified under the EU-US Data Privacy Framework.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, efficient audio delivery).
AWS privacy information: https://aws.amazon.com/compliance/germany-data-protection/

SSL encryption

Our website uses HTTPS with an SSL certificate from Let's Encrypt. This ensures that your data is transmitted encrypted and cannot be read or altered by third parties. You can recognize it by the "https://" address and the padlock icon in your browser's address bar.

Changes to this privacy policy

We reserve the right to adapt this policy in order to bring it in line with current legal requirements or technical changes.

Your rights as a data subject

You have the right to access, rectify, erase or restrict the processing of your personal data, as well as the right to data portability and the right to lodge a complaint with a supervisory authority.