Privacy Policy

What we store, why, and how to get rid of it

Last updated: July 30, 2026

Draft — this text is being reviewed by our lawyer. It reflects how we actually operate, but it is not final. If anything here conflicts with what you were told at checkout, the checkout terms apply and we will honour them.

Who is responsible

[[ Betreiber: Vor- und Nachname / Firma ]], [[ Straße, PLZ, Ort, Land ]]. Questions: [email protected].

Because we are established in the EU, the GDPR applies to how we handle your data — no matter where you live.

When you buy something

To process an order we store your name, email, shipping and billing address, the items you bought, and the order history. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Payment is handled by Stripe. We never see or store your full card number — Stripe processes the payment and tells us only whether it succeeded, plus the last four digits and card brand for your receipt.

Shipping data is passed to our fulfillment partner and the carrier so the parcel can reach you.

Invoices and order records are kept for the statutory retention period (up to 10 years under German commercial and tax law).

Emails

Order and shipping confirmations are part of the contract and are always sent.

Marketing emails only go out if you asked for them. Every marketing email contains a one-click unsubscribe link that works forever — no login required. Unsubscribing blocks all future marketing immediately.

We record whether an email bounced or was marked as spam, so we stop sending to addresses that do not want us.

Statistics on this website

We run our own statistics on our own server. No Google Analytics, no Meta Pixel, no third-party trackers, and no data leaves our systems.

We store a randomly generated, anonymous identifier in your browser's local storage ("mf_vid") to recognise whether several visits come from the same browser, plus an anonymous session identifier.

We record: pages viewed, scroll depth, time on page, and how you arrived (referring website or campaign parameters). We do NOT store IP addresses, we set no cookies for this, and we cannot identify you personally from it.

Legal basis: legitimate interest in understanding how our shop is used (Art. 6(1)(f) GDPR). You can object at any time by clearing your browser storage or using an ad blocker — the shop works fully either way.

Retention: [[ Aufbewahrungsdauer festlegen, Vorschlag: Rohdaten 400 Tage, danach nur noch anonyme Tagessummen ]].

Your rights

You can ask us for a copy of your data, correction, deletion, restriction, portability, or object to processing. One email to [email protected] is enough.

You also have the right to complain to a data protection authority.

California residents: we do not sell or share personal information as defined by the CCPA/CPRA.