Privacy

The controller is [FULL NAME], [POSTAL ADDRESS], Switzerland. Write to support@maskerei.com for anything about your data. Full details are in the imprint.

• Your email address, and your name and profile picture if you sign in with Google. To sign you in and send you your masks (contract).
• With each sign-in session: the IP address and browser it started from. To keep accounts secure (legitimate interest).
• The sentences you type, the designs made from them, and when. To make and show you your masks (contract).
• Purchases: what, when, the price, the order number, the email address, and when you agreed to receive the files at once. To give you access, answer questions, and keep business records (contract; legal obligation).
• Unlock records: the networks (the first part of an IP address, never the whole) an unlock link was opened from in the last 7 days. To notice a link being shared publicly (legitimate interest).
• The emails we sent you: address, subject, type and whether delivery worked. To help when an email goes missing (legitimate interest).
• If you join the waitlist: your email address and the sentence you typed. To invite you later (your request).
• If purchases are paused for you: the email address and the reason. To limit refund abuse and chargebacks (legitimate interest).
• Usage counts (pages viewed, checkouts started), tied to your account when you are signed in but never holding your email or IP address. To count unique visitors we store a code made from the day, your IP address and your browser under a secret key. It changes every day and cannot be turned back into your address. To see whether the site works (legitimate interest).
• Request counters keyed by IP address or email address, to stop abuse. They are normally removed after about two days. Security (legitimate interest).

We don’t sell your data, show advertising or use third-party analytics.

When you buy, you pay on Stripe’s checkout page. Stripe, through its Link service, is the merchant of record and handles your payment details under its own responsibility and Link’s privacy policy. We receive your email address, your country, what you bought and whether the payment went through; never your card number.

These services process data on our behalf. Each receives only what it needs.

Nightly backups of the database are kept for 7 days on the same server and for 30 days in a separate copy at [BACKUP STORAGE PROVIDER AND COUNTRY].

Our server is in Germany, and Switzerland recognises the EU as giving adequate protection. Several of the services above are in the United States or work worldwide. For a US company certified under the Swiss–US and EU–US Data Privacy Framework, that certification is the safeguard. For any other, we rely on the EU standard contractual clauses, with the amendments Switzerland requires.

We set only cookies the site cannot work without, so there is no cookie banner. None is used for advertising or tracking.

• better-auth.session_token: Keeps you signed in after you enter an emailed code or sign in with Google. Lasts 30 days.
• pm_access: Remembers which purchased masks this browser may open (signed, readable only by us). Lasts 1 year.
• pm_checkout: Ties the payment return page to the browser that started the checkout (signed). Lasts 1 hour.

Your light or dark theme, print defaults, the list of masks you started and the sentence you were typing are kept in your browser’s own storage on your device and are not sent to us. Cloudflare Turnstile may use its own browser storage when its bot check runs.

• Sign-in codes: valid for 10 minutes. Sessions: 30 days, or until you sign out.
• Request counters: about two days. Unlock networks: 7 days (older ones are dropped the next time the link is used).
• Your account, sentences and designs: until you delete your account (see below), or until you ask us to erase them.
• Purchase records: as long as business records must be kept by law (in Switzerland, generally 10 years).
• Email records, invites, waitlist entries and purchase pauses: until you ask us to erase them, unless we still need a pause to prevent abuse.

You can delete your account on your account page. That deletes your sign-in details, sessions, pending sign-in codes, Google link and waitlist entry, and hides your designs from everyone except people who bought one.

It does not erase everything. Your designs and sentences stay in our database, no longer tied to you, because a mask someone bought must keep opening. Purchases and unlock records stay too, with the email address they were bought with, so masks you bought keep opening through their emailed links. Our email records, any invite we sent you and any purchase pause stay as well. To have more erased, write to us: we erase what the law does not require us to keep.

You can ask us for a copy of your data, to correct it, to erase it, to limit how we use it, or to receive it in a portable form, and you can object to uses based on our legitimate interest. Write to support@maskerei.com; we answer within 30 days.

Purchases are paused automatically after repeated refunds or a chargeback. If that happens to you, you can ask for a person to review it.

You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or, in the EU, EEA or UK, to the data protection authority where you live.

The site is not meant for children under 16. We may update this page; the date at the top says when.