● PictureToSTL

Privacy Policy

Last updated: 2026-10-07

Who is responsible

Han Yu, Krankenhausstraße 8, 93449 Waldmünchen, Germany. Contact for all privacy questions: support@picturetostl.com

What we process and why

  • Server logs (IP address, browser, time, page): processed by our hosting provider to deliver the site and stop abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Visit statistics (page, referring site, country/city, device type): our own, cookie-free statistics. Visitors are counted with a hash of IP address and browser that is salted with a random value that changes daily and is deleted after two days, so visits can't be linked across days; IP addresses are not stored. Legal basis: legitimate interest (Art. 6(1)(f)).
  • First-visit source (cookie st_ft, only if you click "Accept all"): remembers which site or search brought you here first, so we can see which channels bring users who sign up. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it any time under "Cookie settings" in the footer.
  • Payments: handled by our merchant of record, which receives your payment details directly. We receive the order status and plan to add credits to your account. Legal basis: contract and legal obligations (Art. 6(1)(b), (c)).
  • E-mails you send us: used to answer you. Legal basis: Art. 6(1)(b) or (f).

Service providers

  • Cloudflare, Inc. (USA) – Hosting, content delivery, database and file storage, e-mail for this domain. Transfer safeguard: EU–US Data Privacy Framework / Standard Contractual Clauses.
  • Waffo (merchant of record) – Checkout, payment, invoices and tax – we never see your card details. Transfer safeguard: Its own privacy policy applies to the payment.

Cookies

  • st_consent – necessary – remembers your cookie choice – 180 days
  • st_ft – statistics, only with your consent – first-visit source – 180 days

We don't use advertising or tracking cookies.

How long we keep data

Server logs are kept by our hosting provider for a short period for security. Visit statistics contain no IP addresses and are deleted automatically after 14 months. Purchase records are kept as long as tax law requires.

Your rights

You can ask for access to, correction or deletion of your data, restriction of processing, data portability, and object to processing based on legitimate interest – write to support@picturetostl.com. You can withdraw consent at any time via "Cookie settings" in the footer. You also have the right to complain to a data protection supervisory authority.

Children

This site is not directed at children under 16.