Privacy Policy

Controller

Lukas van Uden, Siteplane UI, Lichtenrader Str. 55, 12049 Berlin, Germany, ui@siteplane.io.

Overview

This site uses no advertising and no cookies for analytics or tracking. We process personal data only to run the site, measure its use without cookies, provide licenses, deliver license keys and answer you.

Hosting

The site is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States. To deliver pages and keep the site secure, Vercel processes the data your browser sends, such as IP address, time, requested page, referrer and browser (Art. 6 (1) (f) GDPR). Vercel is certified under the EU–U.S. Data Privacy Framework and processes data for us under a data processing agreement. Server logs are kept only as long as operation and security require.

Analytics

We count visits with Siteplane Analytics, our own service at siteplane.io, also hosted by Vercel. When a page loads, your browser sends the page address, the referring page, the screen size and clicks on links to other websites, phone numbers or email addresses and on marked buttons, such as the buttons that open the checkout. From your IP address and browser we derive the country and a visitor code that changes every day; the IP address and browser string are not stored, and the daily key behind the code is deleted after that day. Single events are deleted after 30 days, and only daily totals are kept. No cookies are set and nothing is stored in your browser (Art. 6 (1) (f) GDPR, our interest in knowing how the site is used). Siteplane Analytics stores the data with its database provider Supabase in the United States, under Supabase's data processing addendum with the EU standard contractual clauses.

Orders

Orders, paid or free, are processed by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe receives what you enter at checkout, such as name, email address, country and, for a paid order, payment details, to carry out the order and prevent fraud (Art. 6 (1) (b) and (f) GDPR); Stripe may also process data in the USA. We receive your name, email address, country, plan and payment status and use them to provide your license, invoice and any refund (Art. 6 (1) (b) GDPR). Invoices and payment records are kept as long as German commercial and tax law requires, up to 10 years (Art. 6 (1) (c) GDPR). Stripe's privacy policy: https://stripe.com/privacy.

License keys and email

We send license keys and messages about your order or withdrawal through Resend, operated by Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, United States, under a data processing agreement with EU standard contractual clauses; Resend is also certified under the EU–U.S. Data Privacy Framework (Art. 6 (1) (b) GDPR). When you install Patterns, our server checks your license key; this processes the key, your IP address and the time of the request (Art. 6 (1) (b) and (f) GDPR).

Theme and fonts

Your choice of light or dark mode is stored in your browser's local storage and never leaves your device. Fonts are served from this site; your browser contacts no font service.

Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, and you may object to processing based on legitimate interests (Art. 15–18, 20 and 21 GDPR). Write to ui@siteplane.io. You may also complain to a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.