Privacy policy

What data the site processes and why.

Controller

Hosting and server log files

When you visit this website, our server infrastructure automatically processes technical access data (IP address, date and time, the page requested, data volume transferred, browser type and operating system). This is required to deliver the page and to defend against attacks (Art. 6(1)(f) GDPR, legitimate interest in stable and secure operation). This data is not combined with other data sources and is kept only as long as necessary for that purpose.

Cookies and local storage

We use as little as possible. Necessary storage runs without consent; everything else only after your explicit choice in the cookie banner (Section 25 of the German TTDSG). Your choice itself is stored only locally in your browser (localStorage), never as a cookie and never on our server. You can change it any time via “Cookie settings” in the footer.

• Sign-in (necessary): a cookie holding a random session identifier. Without it the customer account does not work. It expires after 30 days or is deleted when you sign out. Legal basis: Art. 6(1)(b) GDPR.
• Visit counter (consent only): an anonymous per-visit counter for our own admin dashboard, without profiling and without sharing it with third parties. Only runs if you accepted “Statistics” in the cookie banner, and expires after 2 years. Legal basis: Art. 6(1)(a) GDPR.

Fonts

All fonts on this website are served as files from our own server and bundled at build time. There is no connection to Google Fonts or any other external font provider, so your IP address is never transmitted for this purpose.

Google Search Console

We use Google Search Console to see how this website is found in Google Search (e.g. search terms, click counts, indexing status). We proved ownership of the domain to Google using a verification file that sets no cookies, loads no scripts, and does not process or transmit any personal data about you as a visitor. Google collects the underlying search data itself as part of its search index and only provides us with aggregated statistics; no individual visitor is identifiable. The legal basis is our legitimate interest in analysing and improving how our website can be found (Art. 6(1)(f) GDPR). Google Ireland Limited is responsible for the processing on Google's side.

Signing in with Google

If you voluntarily sign up via the “Sign in with Google” button, we redirect you to Google, which then learns that the request happened. This connection is only made when you actively click that button, not on an ordinary visit to the site. The legal basis is your consent through the click (Art. 6(1)(a) GDPR). Google Ireland Limited is responsible for the processing on Google's side.

Payment providers

Purchases run through Stripe or PayPal, depending on what you choose during checkout. Payment details are entered directly with that provider and are never processed on this site. What comes back to us is only the order reference, the amount and the payment status.

Account

Creating an account stores your name, email address and optionally a company. The password is kept only as a bcrypt hash. This data is needed to attach a licence to a buyer.

The software

The softphone itself sends no data to this site. Recordings and contacts stay on the machine it runs on.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). You can withdraw a given consent at any time with effect for the future, for example via “Cookie settings” in the footer. Just contact us using the address above.

Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority at any time, in particular in the member state of your residence, place of work, or the place of the alleged infringement. The authority responsible for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.