Privacy Policy

1. Data Controller

The data controller for this website is:

Dr. Ingo Glaser Krumbacherstraße 8 80798 Munich Germany

Email: [email protected]

2. What Data We Collect

2.1 Waitlist

When you sign up for our waitlist, we collect:

• Email address (required)
• Professional role (optional, e.g., DPO, Legal, IT)

This data is used exclusively to notify you about the launch of Stript.

2.1b Purchase and Licensing

When you purchase Stript Professional, the following data is collected:

• Email address (for license key delivery and purchase confirmation)
• Payment data (credit card, PayPal, etc.)

Payment processing is handled entirely by LemonSqueezy (Lemon Squeezy LLC, USA) as Merchant of Record. We do not store any payment data ourselves. LemonSqueezy processes your data in accordance with their privacy policy.

Legal basis: Art. 6(1)(b) GDPR (contract performance).

Purchase data is retained for the duration of the contractual relationship and beyond, in accordance with statutory retention obligations (§ 147 AO: 10 years).

2.2 Server Log Data

Each time you access our website, the following data is automatically recorded:

• IP address (anonymized)
• Date and time of access
• Page accessed
• Browser type and operating system

This data is required for technical operation and is deleted after 30 days.

2.3 Web Analytics

We use Cloudflare Web Analytics to understand how our website is used. Cloudflare Web Analytics collects the following aggregated, non-personal data:

• Pages visited
• Referrer (where you came from)
• Country (derived from IP address, not stored)
• Device type, browser, and operating system

Cloudflare Web Analytics uses no cookies and does not track individual visitors. Your IP address is used solely for geolocation and is not stored or associated with your visit. All data is aggregated and cannot be used to identify you.

2.4 Cookies

This website uses no cookies. We do not use tracking cookies, analytics cookies, or marketing cookies.

2.5 Desktop Application

The Stript desktop application processes all documents exclusively on your local machine. No document content, no personal data from your documents, and no usage telemetry is transmitted to us or any third party. The only network requests made by the desktop application are:

• One-time download of AI models during initial setup
• License key validation (at most every 30 days, transmits only the key — no document data)

3. Legal Basis

• Waitlist: Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time.
• Purchase/licensing: Art. 6(1)(b) GDPR (contract performance).
• Server log data: Art. 6(1)(f) GDPR (legitimate interest in providing the website).
• Web Analytics: Art. 6(1)(f) GDPR (legitimate interest in understanding website usage to improve our service).

4. Data Processors

4.1 Resend Inc.

We use Resend Inc. (USA) for sending emails and managing our waitlist. Resend processes your email address on our behalf. Data transfer to the USA is based on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

More information: resend.com/legal/privacy-policy

4.2 Cloudflare Inc.

This website is hosted via Cloudflare Pages. We also use Cloudflare Web Analytics for aggregated, cookie-less website analytics. Cloudflare processes technical access data and analytics data on our behalf. Cloudflare is certified under the EU-US Data Privacy Framework.

More information: cloudflare.com/privacypolicy

4.3 LemonSqueezy LLC

We use LemonSqueezy LLC (USA) as Merchant of Record for payment processing and license key management. LemonSqueezy processes purchase data (email, payment information) on our behalf. LemonSqueezy is certified under the EU-US Data Privacy Framework.

More information: lemonsqueezy.com/privacy

5. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): You can request information about your data stored with us.
• Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You can request deletion of your data.
• Right to restriction (Art. 18 GDPR): You can request restriction of processing.
• Right to data portability (Art. 20 GDPR): You can receive your data in a common format.
• Right to object (Art. 21 GDPR): You can object to the processing of your data.
• Right to withdraw consent (Art. 7(3) GDPR): You can withdraw consent at any time.

To exercise your rights, please contact: [email protected]

6. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18 91522 Ansbach Germany

Website: lda.bayern.de

7. Changes

We reserve the right to update this privacy policy to comply with current legal requirements or to implement changes to our services.

Last updated: March 2026