Privacy Policy
1. Controller
RT Digital Commerce UG, Fontanestraße 11, 14193 Berlin, Germany, represented by Roman Tayupov. Contact: support@sentineldsp.com.
2. What we collect, and why
Purchases. When you buy a plugin, payment is handled by Stripe Payments Europe Ltd. (1 Grand Canal Street Lower, Dublin 2, Ireland). Stripe collects your email address, billing address, and payment details; we receive your email address, billing country, the amount, and a payment reference — never your card number. The legal basis is performance of a contract, Art. 6(1)(b) GDPR. We are required to keep invoice data for ten years (§ 147 AO); it is retained in Stripe for that period.
License keys. Your license key is a cryptographic signature over your email address and nothing else. It is generated on demand and not stored by us; a lost key is re-issued from the address you bought with. The plugin displays that address and never transmits it anywhere.
Order and support email. Purchase confirmations and replies to support requests are sent through Resend, Inc. (2261 Market Street #5039, San Francisco, CA 94114, USA), which processes the recipient address and message content on our behalf under standard contractual clauses. Contact form submissions (name, email, topic, message) are used solely to answer you, Art. 6(1)(b) and (f) GDPR.
Newsletter. When you enter your email address in one of the sign-up fields on this site and submit it, you subscribe to our newsletter: occasional emails about new plugins, updates and related articles. We store only that address, with Resend (see above), and use it for nothing else. The legal basis is your consent, Art. 6(1)(a) GDPR. Every newsletter carries an unsubscribe link, and you can also withdraw by writing to support@sentineldsp.com; withdrawal takes effect immediately for the future. If you buy a plugin, we add the email address you bought with to the same newsletter, as checkout tells you before you pay; the legal basis is our legitimate interest in telling customers about our own similar products, Art. 6(1)(f) GDPR and § 7(3) UWG. You can object at any time, at no cost beyond the basic rates of transmission, via the unsubscribe link in every newsletter or by writing to support@sentineldsp.com.
Downloads. Installer downloads are served through this site from a private release repository on GitHub. The fetch is made by our server, not your browser, so your IP address is not disclosed to GitHub.
Product videos. Demo videos are hosted on YouTube, a service of Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland). Only a preview image stored on our own server is shown until you press play; nothing is requested from Google before that. When you press play, the video is embedded in YouTube’s privacy-enhanced mode, and Google receives your IP address and browser information as needed to deliver it. The legal basis is your consent expressed by starting the video, Art. 6(1)(a) GDPR and § 25(1) TDDDG. Google may transfer data to the United States on the basis of its certification under the EU–US Data Privacy Framework.
Audio players. Before/after audio examples are embedded from SoundCloud, a service of SoundCloud Global Limited & Co. KG (Rheinsberger Str. 76/77, 10115 Berlin, Germany). The player loads together with the page, so SoundCloud receives your IP address and browser information as needed to deliver it, and may set its own cookies. The legal basis is our legitimate interest in presenting audio examples of the product, Art. 6(1)(f) GDPR. SoundCloud may transfer data to SoundCloud Inc. in the United States on the basis of standard contractual clauses.
Hosting. This site is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). Vercel processes IP addresses and request metadata as needed to deliver the site, on the basis of our legitimate interest in operating it, Art. 6(1)(f) GDPR, under standard contractual clauses.
3. Cookies, consent & tracking
Meta Pixel. With your consent, this site loads the Meta Pixel, a service of Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland). It is used to measure the performance of advertising and to reach comparable audiences. It collects your IP address, information about your browser and device, which pages you view, and whether you start or complete a purchase, and it stores the cookies _fbp and _fbc in your browser for up to 90 days. Meta may transfer this data to Meta Platforms, Inc. in the United States on the basis of its certification under the EU–US Data Privacy Framework. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Nothing is loaded and no cookie is set before you agree.
Withdrawing consent. You can change your mind at any time using the “Cookie settings” link at the bottom of any page. Withdrawing takes effect immediately for the future and removes the cookies described above; it does not affect processing that already took place while your consent was in force.
What runs without your consent. Anonymous, aggregated traffic statistics (Vercel Web Analytics) are collected on the basis of legitimate interest, Art. 6(1)(f) GDPR. They set no cookies and store nothing on your device, so § 25 TDDDG does not apply and no consent is required — no profile is built and you are not identified. Stripe sets cookies strictly necessary to process a transaction and to prevent fraud. Your consent choice itself is stored locally in your browser so the banner does not reappear on every visit; that storage is strictly necessary under § 25(2) no. 2 TDDDG.
4. Storage & deletion
Personal data is stored only for as long as necessary for the purpose it was collected for, or as long as the law requires (invoice data: ten years), and is deleted once neither applies. Support correspondence is deleted once your request is resolved and no follow-up is pending. A newsletter address is kept until you unsubscribe.
5. Your rights
You have the right to access, correct, delete, or restrict the processing of your personal data, the right to data portability, and the right to object to processing based on legitimate interest at any time. Where processing is based on consent, you may withdraw it at any time with effect for the future.
6. Contact & complaints
For any questions regarding this policy, contact support@sentineldsp.com. You also have the right to lodge a complaint with a supervisory authority; ours is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
