Privacy

Controller: Lucas Kleipödszus, Felchenstraße 21, 76437 Rastatt, Germany. Contact: [email protected]. Last updated: 13 September 2026.

Website and infrastructure

Hosting infrastructure and Cloudflare process connection information such as IP addresses, request paths, timestamps and browser details to deliver and secure this website. Fonts and artwork are served locally. We do not use advertising analytics on this site.

Purchases and downloads

Stripe hosts payment entry and processes billing details and payment information. We do not receive or store card numbers. We store an order reference, chosen package, Stripe checkout reference, email address, payment status, entitlement dates and terms version to fulfill purchases and support customers. The legal basis is performance of the contract; required accounting retention is based on legal obligations.

Access cookies are necessary to protect your purchase downloads. They are HttpOnly, last up to thirty days and are not advertising cookies. Recovery links are single-use and expire after twenty-four hours. Security rate limits store hashed keys temporarily. Private access links should not be shared.

WordPress updates

WordPress checks our server for package versions. Paid update downloads send a private update key; we store only its hash with the order reference and verify payment and expiry. You can revoke or replace the key from your purchase page. Connection information is processed to deliver and secure updates. Your WordPress database stores the key encrypted with WordPress salts, so protect site and configuration backups together. No installed feature is disabled when update access ends.

Email and support

Transactional purchase and recovery emails are sent through Resend when email delivery is enabled. We use your address for order delivery and requested support, not unsolicited marketing. If you email support, we process the information you provide to respond. Avoid including credentials or sensitive third-party data.

Third-party media

The design demo uses fictional sample content. The separate livvux practice example uses the owner’s real Twitch clip. On that example and on a real creator site, a Twitch player loads only after a visitor chooses it; Twitch then receives connection and browser information under its own privacy policy. External community links lead to the respective providers.

Retention and rights

We retain order and billing records for applicable statutory periods and data needed to provide purchased support and prevent abuse. Recovery tokens expire after twenty-four hours; access-cookie expiry is thirty days. Backups may retain deleted records until their scheduled expiry. You may request access, correction, deletion, restriction or portability where applicable, and object to processing based on legitimate interests. You may complain to a supervisory authority.

Stripe, Cloudflare and Resend may process data outside the EEA under their applicable data-transfer safeguards. Their notices provide further details: Stripe privacy, Cloudflare privacy, Resend privacy. Contact us for questions about processing on this website.