Privacy

Last updated: 13 August 2026

The short version: no cookies, no third-party trackers, and no way for us to work out who you are.

Cookies

No tracking cookies, and no cookies at all unless you create an account. If you sign in, we set one: it holds a random session identifier so the site knows it is still you on the next page. It contains nothing else, it is not readable by scripts, and it is not shared with anyone. Signing out deletes it, here and on our server.

That single cookie is what the ePrivacy rules call strictly necessary — the sign-in cannot work without it — which is why you are still not being asked to agree to anything. Browse without an account and no cookie is ever set.

How we count visits

We record which pages are opened and which steps are taken, so we know whether the tool is understandable. To tie those steps into one visit we store a hash of your IP address and browser, salted with a random value that is generated fresh every day and then thrown away. The next day the same person hashes to something unrelated, and the hash cannot be turned back into an address. We do not store IP addresses.

What you type into the tool

Box dimensions and settings stay in your browser. They only reach us if you buy a file, in which case the configuration is stored with the order so the file can be regenerated, or if you attach them to a feedback message.

Payments

Payments run through Stripe. Card details go to Stripe and never reach us; we receive only a payment reference and a status. Stripe processes some personal data as a controller in its own right, under its own privacy policy.

Email addresses

Optional at checkout, used for your receipt and to send you the download link again. Optional in the feedback form, used only to reply to you. Never sold, never used for marketing you did not ask for.

Feedback

Messages you send are stored, forwarded to the person who builds this, and summarised once a week so nothing gets lost. If you left an email address it travels with the message so a reply is possible.

How long we keep things

Orders for seven years, because tax law requires it. Analytics events for 14 months. Daily salts for 48 hours. Sign-in sessions for 30 days, or until you sign out. Feedback until it is dealt with. Delete your account and everything that is not legally required to keep goes with it.

Your rights

You can ask for a copy of what we hold about you, ask for it to be corrected or deleted, or object to how it is used. Write to [email protected]. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Where it lives

On a server in Germany, inside the EU.