Home / Privacy
Privacy Policy
Information under the EU GDPR · Updated 2026-10-14
1. Controller
EMP Tweaks
Germany
Email: support@emptweaks.com
See also the Legal notice.
2. Purposes of processing
We process personal data to:
- fulfill digital license orders (payment, invoice, key delivery),
- operate the website and prevent abuse,
- run partner / streamer programs when used,
- meet legal retention duties.
3. What data?
- Orders: email, billing country/address (via Stripe), payment status, order IDs, tax fields where needed
- License: email mapping, key status (e.g. in Supabase)
- Technical: IP address and short-lived server logs (security / hosting)
- Cookies / local storage: consent flag, checkout session, shop UI settings — see cookie banner
- Optional reviews: display name and text you submit
- Streamer portal: login, profile, platform links, reach, payout bank details (IBAN etc.)
We do not sell your data.
4. Payment provider Stripe
Payments are processed by Stripe (Stripe Payments Europe Ltd. / Stripe, Inc.). Stripe processes payment data under its own privacy terms: stripe.com/privacy.
Legal bases: Art. 6 (1)(b) GDPR (contract), (c) (tax duties), and (f) (fraud prevention).
5. Hosting & databases
The site may run on hosting providers (e.g. Render). Order / license data may be stored in Supabase (PostgreSQL, EU region when configured).
Legal bases: Art. 6 (1)(b) and (f) GDPR.
6. Cookies & similar tech
Necessary storage only: consent status, secure checkout session, technical shop local storage.
We currently use no marketing / analytics pixels (no Google Analytics etc.). If that changes, we will ask for consent first.
Legal basis for necessary cookies: Art. 6 (1)(f) GDPR / § 25 (2) TDDDG where applicable.
7. Retention
Order and invoice data are kept as long as commercial/tax law or contract performance requires (often up to 10 years). Logs are kept shorter. Consent records until withdrawn or no longer needed as proof.
8. Your rights (GDPR)
You may request access, rectification, erasure, restriction, portability, and objection (Arts. 15–21 GDPR), and lodge a complaint with a supervisory authority.
Contact: support@emptweaks.com
9. No automated decision-making
We do not use solely automated decision-making including profiling with legal effect under Art. 22 GDPR.