Operator details are not configured yet. Set the LEGAL_* environment variables before going live.
Privacy policy
Controller
, , email:
What we process
- Account: email address and a password hash (contract, Art. 6(1)(b) GDPR).
- Content: listed apps, feedback text, screenshots and, for test groups, the Google account email you provide. Feedback and screenshots are visible only to the tester and the owner of the tested app; the test email only to the app owner (Art. 6(1)(b)).
- Credits and purchases: balances and purchase numbers. Paddle sells Featured and Boost as the merchant. We receive no payment details (Art. 6(1)(b); retention duties Art. 6(1)(c)).
- Sign-in with Google or Apple: we receive only an identifier and your verified email address from the provider, no password and no other profile data (Art. 6(1)(b)).
- Emails: confirmation, password reset and notifications about your tasks, packs and test groups. These are service emails, not a newsletter (Art. 6(1)(b)). They are sent via [add email provider].
- Server logs: IP address, time and requested page for security and debugging (Art. 6(1)(f)).
Cookies
We set one strictly necessary session cookie for login. There is no advertising. Fonts are served from our own server.
| Name | Purpose | Duration | Consent |
|---|---|---|---|
session | Login session | 14 days | not required (strictly necessary) |
ar_nonce | Protection for sign-in with Google or Apple | 10 minutes | not required |
ar_consent (local storage) | remembers your cookie choice | 12 months | not required |
Recipients and processors
- Hosting: [add hosting provider].
- Paddle (Paddle.com Market Limited, merchant of record and payment processing): the Paddle script loads only when you open the star purchase.
- Anthropic (USA): only if the automatic screenshot check is enabled, an uploaded screenshot is sent for checking. The result is only a hint for the app owner.
Retention
Your account and content stay until the account is deleted. Purchase records are kept for the legally required period.
Your rights
You can access and delete your data yourself in the app under “Account” (JSON export, delete account). You have the right of access, rectification, erasure, restriction, portability and objection. Write to . You may also complain to a data protection authority.