Privacy Policy
1. Controller and contact
The controller for the processing by Printchen described here is Stuart Acklam, Ehestorfer Heuweg 74a, 21149 Hamburg, Germany. You can contact us at stuart@printchen.com or +49 40 41167116, including for privacy requests.
2. Account and sign-in
We need your email address for your account. Email one-time-code sign-in processes your address, code verification data and session information. You do not create a Printchen customer password. Sign-in is needed to associate saved designs, your wallet, unlocks and your own files with your account.
If Google sign-in is offered on the sign-in page and you choose it, Printchen receives your verified email address, a Google identifier and, where supplied, your profile name. Authentication is implemented using Auth.js. A sender name is needed for gifts and can optionally be saved.
Account-related processing provides the functions you request and performs the contract (Article 6(1)(b) GDPR). These account functions cannot be provided without the required information.
3. Designs, wallet and purchases
Printchen processes saved designs, including entered text and selected design values, revisions, unlocks and associated file access. This enables saving, continuing your work and downloading unlocked revisions again.
The wallet processes credit movements and their associations with purchases, gifts and unlocks. Purchase data includes purchase and transaction references, amounts, status and account association. This serves contract performance (Article 6(1)(b) GDPR); legally required records are based on Article 6(1)(c) GDPR.
4. Paddle
Purchases are handled through Paddle. Paddle processes the information needed for checkout, payment, taxes and receipts under its own privacy notice. Printchen receives purchase and payment-status information to associate !CHEN with your account. The Paddle contracting party and notices identified at checkout apply to that process.
5. Technical operation and security
The application is hosted on Vercel; application data uses a PostgreSQL database at Neon. Technically necessary connection and request data is processed when you visit the website so that pages can be delivered.
Printchen limits code requests and sign-in attempts to protect authentication. Protected verification values derived from an IP address or email address, and attempt counters, are processed for this purpose. The purpose is protection against misuse and unauthorised access (legitimate interest under Article 6(1)(f) GDPR).
7. Emails and gifts
The application uses Resend for email sign-in codes and gift emails. Addresses and message contents needed for delivery are processed. For gifts, these include the recipient address, sender name, sender address and any personal message added.
Support requests are sent through Resend to Help Scout. This includes your name, email address, selected category, message and any design links or screenshots you choose to include.
Service emails support the sign-in or gift process you request (Article 6(1)(b) GDPR). If you contact support, we process your message and contact details to address your enquiry; depending on the enquiry, this serves contract performance or our legitimate interest in answering enquiries.
9. Optional Printchen newsletter
If you subscribe to the Printchen newsletter, you receive Printchen news, new products, features, creative ideas and offers by email. Subscribing is optional and independent of creating an account or making a purchase. Creating an account alone does not subscribe you. Newsletter delivery is based on your consent (Article 6(1)(a) GDPR).
Sign-up uses double opt-in: after subscribing, you receive a confirmation email. Your newsletter subscription becomes active only after you click its confirmation link. The newsletter option during Printchen account sign-up is not yet enabled.
We use CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany, to manage newsletter subscriptions and send emails. This involves processing your email address, subscription and confirmation status, and associated timestamps. Technical information such as your IP address, browser identifier and referring page is also processed to document sign-up. The recipient list is not shared with Etsy or other marketers for their own advertising.
You may withdraw your consent at any time for the future using the unsubscribe link in a newsletter or by emailing stuart@printchen.com. Withdrawal does not affect the lawfulness of earlier processing. Unsubscribing concerns the newsletter; necessary emails about your account or purchases remain separate.
Newsletter data is processed for the duration of your subscription. After you unsubscribe, it is no longer used for newsletter advertising. Necessary consent records and suppression entries may be retained based on our legitimate interest in demonstrating consent, defending legal claims and preventing unwanted messages (Article 6(1)(f) GDPR), for as long as needed for those purposes. Statutory retention obligations remain unaffected.
10. Deletion and retention
You can request access or deletion at stuart@printchen.com. If your account still contains !CHEN, support will discuss how to handle the credit and existing claims with you. This implies neither automatic forfeiture of credit nor an additional general refund promise. Privacy requests are handled independently of that discussion.
Account deletion may end access to saved designs and repeat downloads through the account. Statutory retention duties and the assessment of existing claims may prevent immediate deletion of particular data. Deleting a saved design is not the same as deleting an account.
11. Your rights
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may object to direct marketing at any time.
You may withdraw consent at any time for the future. You also have the right to complain to a data protection supervisory authority. To exercise your rights, contact stuart@printchen.com; where necessary, we will verify your identity to avoid disclosing data to unauthorised people.
12. Subscription and licence data
We store the Paddle customer and subscription association, plan, paid periods, payment status, cancellation date, accepted plan version, credit movements and unlocks. These records support contract performance, commercial access and refund handling. Paddle processes payment data under its own privacy notice.