Privacy Policy

RT Digital Commerce UG (haftungsbeschränkt), Fontanestraße 11, 14193 Berlin, Germany, represented by Roman Tayupov. Contact: support@sentineldsp.com.

Purchases. When you buy a plugin, payment is handled by Stripe Payments Europe Ltd. (1 Grand Canal Street Lower, Dublin 2, Ireland). Stripe collects your email address, billing address, and payment details; we receive your email address, billing country, the amount, and a payment reference — never your card number. The legal basis is performance of a contract, Art. 6(1)(b) GDPR. We are required to keep invoice data for ten years (§ 147 AO); it is retained in Stripe for that period.

License keys. Your license key is a cryptographic signature over your email address and nothing else. It is generated on demand and not stored by us; a lost key is re-issued from the address you bought with. The plugin displays that address and never transmits it anywhere.

Order and support email. Purchase confirmations and replies to support requests are sent through Resend, Inc. (2261 Market Street #5039, San Francisco, CA 94114, USA), which processes the recipient address and message content on our behalf under standard contractual clauses. Contact form submissions (name, email, topic, message) are used solely to answer you, Art. 6(1)(b) and (f) GDPR.

Newsletter. When you enter your email address in one of the sign-up fields on this site and submit it, you subscribe to our newsletter: occasional emails about new plugins, updates and related articles. We store that address with Resend (see above), together with a few facts about your relationship with us — for each of our plugins, whether you have taken its free trial, downloaded it or bought it — so that we can send you what is relevant to you, and use it for nothing else. The legal basis is your consent, Art. 6(1)(a) GDPR. Every newsletter carries an unsubscribe link, and you can also withdraw by writing to support@sentineldsp.com; withdrawal takes effect immediately for the future. If you buy a plugin, we add the email address you bought with to the same newsletter, as checkout tells you before you pay; the legal basis is our legitimate interest in telling customers about our own similar products, Art. 6(1)(f) GDPR and § 7(3) UWG. You can object at any time, at no cost beyond the basic rates of transmission, via the unsubscribe link in every newsletter or by writing to support@sentineldsp.com.

Free trial. When you request a free plugin trial, we store the email address you enter with Resend (see above), note that you took the trial, send you an email with the download links and, seven days later, one reminder that the trial has ended (unless you have bought the plugin by then), and add the address to our newsletter, as the trial form tells you before you submit it. The legal basis is your consent, Art. 6(1)(a) GDPR; you can withdraw it at any time via the unsubscribe link in the reminder and in every newsletter, or by writing to support@sentineldsp.com. The trial itself runs entirely inside the plugin and sends nothing to us.

Free downloads. When you enter your email address to download a free plugin, we store it with Resend (see above), note which plugin you downloaded, send you one email with the download links, and add the address to our newsletter, as the download form tells you before you submit it. The legal basis is your consent, Art. 6(1)(a) GDPR; you can withdraw it at any time via the unsubscribe link in every newsletter or by writing to support@sentineldsp.com.

Reviews. A week after you buy a plugin, we send you one email asking you to review it, unless you have unsubscribed from our newsletter. The legal basis is our legitimate interest in feedback on our products and in showing it to other customers, Art. 6(1)(f) GDPR and § 7(3) UWG; you can object at any time via the unsubscribe link in that email or in every newsletter, or by writing to support@sentineldsp.com. The link in it carries a code that shows a review comes from an order; the code contains neither your email address nor your order details. If you write a review, the rating, text and the name you enter are stored in this site’s code repository at GitHub, Inc. (88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA), where we read it before publishing it on this site with its date; your email address is not part of it. The legal basis is your consent, given by submitting the review form, Art. 6(1)(a) GDPR; you can withdraw it at any time by writing to support@sentineldsp.com, and we will remove the review. GitHub may transfer data to the United States on the basis of its certification under the EU–US Data Privacy Framework.

Email statistics. The emails we send through Resend (newsletters, purchase confirmations, trial, download and review request emails) contain a small image that is loaded when you open them, and their links pass through link.sentineldsp.com on the way to their destination. This tells us whether and when an email was opened and which links were clicked, stored with Resend against your address. We use it only to see which emails are useful and to improve them, on the same legal basis as the email itself (see above). You can prevent it by not loading images in your email client; unsubscribing ends it for the newsletter.

Product analytics. When you download a free plugin, request a free trial or buy a plugin, our server records that event (which plugin, when, and for a purchase the amount paid) together with your email address in PostHog, a product analytics service of PostHog, Inc. (2261 Market St. #4008, San Francisco, CA 94114, USA). The data is hosted in the European Union (Frankfurt) and processed on our behalf under a data processing agreement with standard contractual clauses. We use it only to understand how downloads and trials lead to purchases and to see an individual address’s history with us. Nothing is read from or stored on your device for this. The legal basis is our legitimate interest in understanding and improving our sales, Art. 6(1)(f) GDPR; you can object at any time by writing to support@sentineldsp.com, and we will delete your record there. If you have also allowed PostHog’s analytics in this site’s cookie settings (see section 3), this record is linked with what PostHog recorded in your browser, such as the pages you viewed and the link that brought you here.

Error reports. When something fails on our server, for example an email that could not be sent or a download that could not be served, we record a technical description of the error (what failed, where in our code and when) in PostHog, the service described above. These records are not linked to your email address or to your product analytics record. The legal basis is our legitimate interest in running this site and delivering what you asked for without faults, Art. 6(1)(f) GDPR.

Downloads. Installer downloads are served through this site from a private release repository on GitHub. The fetch is made by our server, not your browser, so your IP address is not disclosed to GitHub.

Product videos. Demo videos are hosted on YouTube, a service of Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland). Only a preview image stored on our own server is shown until you press play; nothing is requested from Google before that. When you press play, the video is embedded in YouTube’s privacy-enhanced mode, and Google receives your IP address and browser information as needed to deliver it. The legal basis is your consent expressed by starting the video, Art. 6(1)(a) GDPR and § 25(1) TDDDG. Google may transfer data to the United States on the basis of its certification under the EU–US Data Privacy Framework.

Audio players. Before/after audio examples are embedded from SoundCloud, a service of SoundCloud Global Limited & Co. KG (Rheinsberger Str. 76/77, 10115 Berlin, Germany). The player loads together with the page, so SoundCloud receives your IP address and browser information as needed to deliver it, and may set its own cookies. The legal basis is our legitimate interest in presenting audio examples of the product, Art. 6(1)(f) GDPR. SoundCloud may transfer data to SoundCloud Inc. in the United States on the basis of standard contractual clauses.

Hosting. This site is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). Vercel processes IP addresses and request metadata as needed to deliver the site, on the basis of our legitimate interest in operating it, Art. 6(1)(f) GDPR, under standard contractual clauses.

Meta Pixel. With your consent, this site loads the Meta Pixel, a service of Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland). It is used to measure the performance of advertising and to reach comparable audiences. It collects your IP address, information about your browser and device, which pages you view, and whether you start or complete a purchase, and it stores the cookies _fbp and _fbc in your browser for up to 90 days. Under the same consent, our server also reports to Meta directly, through Meta’s Conversions API, when you start a checkout, complete a purchase, start a free trial or request a free download, so these are counted even where the browser doesn’t deliver them. That report contains your IP address, your browser’s user agent, the _fbp and _fbc identifiers, the product and amount, and, where you gave us one, your email address and billing country as one-way (SHA-256) hashes. For a purchase, the IP address, user agent and identifiers are stored with the order at our payment provider, Stripe, so the purchase can be reported once the payment is confirmed. Meta may transfer this data to Meta Platforms, Inc. in the United States on the basis of its certification under the EU–US Data Privacy Framework. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Nothing is loaded and no cookie is set before you agree.

PostHog. With the same consent, the analytics script of PostHog (the product analytics service described in section 2, hosted in the European Union and processed on our behalf under the same data processing agreement) switches from the cookieless mode described below to full analytics. It then records which pages you view, the page or link that brought you here, including the campaign parameters in that link (utm_source and similar), information about your browser and device, and your IP address, from which PostHog derives your approximate location (country and city). It stores a random identifier and these details in your browser’s local storage (entries beginning with ph_), and we keep your visit’s campaign parameters in the browser’s session storage until you close the tab. When you request a free trial or a free download, this browsing history is linked to your email address in PostHog. When you start a checkout, the identifier and the campaign parameters are stored with the order at our payment provider, Stripe, so the purchase can be linked the same way once the payment is confirmed; the campaign parameters stay with the payment record. We use this to see which ads, links and pages lead to downloads, trials and purchases. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Nothing is stored before you agree.

Withdrawing consent. You can change your mind at any time using the “Cookie settings” link at the bottom of any page. Withdrawing takes effect immediately for the future and removes the cookies and stored identifiers described above; it does not affect processing that already took place while your consent was in force.

What runs without your consent. Until you choose, and if you decline, PostHog’s script runs in a cookieless mode for anonymous traffic statistics: which pages are viewed, the page or link that led to them, including its campaign parameters, and the type of browser and device. It sets no cookies and stores nothing on your device. To count visitors, PostHog computes a one-way hash of your IP address and your browser’s user agent with a random value that changes daily and is then deleted, so a visit can’t be linked to your visits on other days, to your email address or to you; no location is derived. The legal basis is our legitimate interest in knowing how many people visit the site and how they find it, Art. 6(1)(f) GDPR; since nothing is stored on your device, § 25 TDDDG does not apply and no consent is required. Stripe sets cookies strictly necessary to process a transaction and to prevent fraud. Your consent choice itself is stored locally in your browser so the banner does not reappear on every visit; that storage is strictly necessary under § 25(2) no. 2 TDDDG.

Personal data is stored only for as long as necessary for the purpose it was collected for, or as long as the law requires (invoice data: ten years), and is deleted once neither applies. Support correspondence is deleted once your request is resolved and no follow-up is pending. A newsletter address, including one given for the free trial or a free download, is kept until you unsubscribe. Product analytics records and error reports are kept until you object or ask for them to be deleted. A published review stays on this site until you withdraw your consent.

You have the right to access, correct, delete, or restrict the processing of your personal data, the right to data portability, and the right to object to processing based on legitimate interest at any time. Where processing is based on consent, you may withdraw it at any time with effect for the future.

For any questions regarding this policy, contact support@sentineldsp.com. You also have the right to lodge a complaint with a supervisory authority; ours is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).