Privacy policy

1. Controller

Christoffer Sidiropoulos
Breslauer Straße 32
26419 Schortens
Deutschland

E-Mail: contact@pinpunto.com

2. Uploaded pictures

Your picture is only used to compute your stitch file. We do not keep the picture itself; we store the computed stitches and preview values, encrypted (AES-256), for 30 days so you can download after purchase. Then they are deleted automatically. Legal basis: Art. 6(1)(b) GDPR.

2a. What happens only on your device

“Remove background”, “Crop”, “Type a name” and the free stitch-file viewer and converter run entirely in your browser. The detector they need (MediaPipe) is loaded from our own server; nothing is sent to third parties. We receive nothing from these steps unless you then turn the result into a stitch file as a picture. Section 2 applies to that.

3. Payment

Payments are handled by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland, which processes your name, e-mail, payment details and billing address. We only receive what is needed to deliver your purchase. Legal basis: Art. 6(1)(b) and (c) GDPR. Stripe privacy: https://stripe.com/privacy

4. E-mail with your files

After purchase we e-mail you your stitch files (attached) and the download link via Resend (Resend Inc., USA). Legal basis: Art. 6(1)(b) GDPR.

5. Hosting and server logs

The site is hosted by Vercel Inc., USA. Technically necessary data (IP address, time, page, browser) is processed briefly to deliver the site and prevent abuse. Legal basis: Art. 6(1)(f) GDPR.

6. Transfers outside the EU

Vercel, Stripe, Resend and – only with your consent – Google may process data in the USA, based on the EU-US Data Privacy Framework or the EU standard contractual clauses.

7. Cookies

The only technically necessary cookie (“locale”) remembers your language; your browser also remembers your machine brand on the download page and your choice about analytics cookies. There are no advertising cookies. Google Analytics cookies are only set if you agree (section 7a).

7a. Google Analytics (only with your consent)

If you click “Allow” in the “Analytics cookies” notice, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how Pinpunto is used: which pages are viewed and which features are used (for example uploading a picture, choosing a size, starting a purchase), where visits come from, and coarse device and location data. This stores the cookies “_ga” and “_ga_…”, each for up to 2 years. According to Google, IP addresses of users in the EU, Switzerland and the UK are not logged or stored. Advertising features and Google signals are switched off.

If you buy with consent given, we report the purchase to Google after payment (amount, currency, order number) together with the anonymous ID from the cookie, so we can see which paths lead to purchases. Google never receives your e-mail address, your pictures or your stitch files.

Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time under “Cookie settings” at the bottom of every page; the analytics cookies are then deleted. Google’s privacy policy: https://policies.google.com/privacy

8. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR) and to lodge a complaint with a supervisory authority. Just send us an e-mail.