Privacy

Controller

Endlich Studio
Wöhlertstraße 20, 10119 Berlin, Germany
hello@sponable.app
Full controller details in the imprint

Website and downloads

Cloudflare, Inc. hosts this website and our downloads. It processes your IP address and request details, including the requested URL, time and browser information, to deliver content and protect the service. The legal basis is our legitimate interest in operating a reliable, secure website (Art. 6(1)(f) GDPR). These technical data are necessary to provide the service.

We count completed download transfers and clicks through to checkout to understand how the website is used. Checkout counts are grouped by day, page and referring-site category; they do not contain IP addresses, browser identifiers or customer details. Download measurement uses a daily keyed hash of the IP address and browser information to group retries and partial transfers; raw transfer records are removed after 90 days. A completed transfer does not tell us whether you installed or used the app.

Fonts and media are self-hosted. We do not use advertising trackers or set cookies. Your browser stores your motion preference and whether you dismissed or answered the feedback survey. Dismissal suppresses the survey for 30 days; the stored entries remain until you clear the website’s browser data.

Email

When you contact us, we process your email address and message to respond. Our email service provider processes this correspondence on our behalf. The legal basis is Art. 6(1)(b) GDPR for purchase or support requests, and our legitimate interest in answering other inquiries under Art. 6(1)(f) GDPR. Providing these details is voluntary, but we need a reply address to respond.

Purchases and activation

Purchases take place on Lemon Squeezy’s website. As merchant of record, Lemon Squeezy processes checkout, payment and billing data under its privacy policy. The app also sends licensing information to Lemon Squeezy to validate your key and manage activations. Processing necessary to provide and manage your license is based on Art. 6(1)(b) GDPR; without it, a paid license cannot be issued or activated.

Optional feedback

Survey responses are stored in Cloudflare’s database with a random response ID, timestamps, survey version and variant, option order, page, language, device class, campaign parameters and referring domain. We also keep aggregate daily participation counts. No name or email is requested; please avoid personal details in free-text answers.

We use this information to improve Sponable and the website, based on our legitimate interest under Art. 6(1)(f) GDPR. Participation is voluntary. To prevent abuse, the server stores a salted hash of your IP address separately from responses. Rate-limit entries expire after ten minutes and are removed during subsequent request cleanup.

Storage and international transfers

We retain personal data only as long as needed for the relevant purpose: handling inquiries, providing licenses, evaluating feedback or resolving security incidents. Longer retention applies where required by law or necessary for legal claims (Art. 6(1)(c) or (f) GDPR).

Cloudflare and Lemon Squeezy may process data outside the EEA, including in the US. Cloudflare’s data processing agreement describes its transfer safeguards, including EU standard contractual clauses. Lemon Squeezy describes its international processing in the privacy policy linked above. You can contact us for information about applicable safeguards and copies.

Your rights

Under the applicable GDPR conditions, you may request access, correction, deletion, restriction and portability of your personal data. You may object to processing based on legitimate interests on grounds relating to your particular situation. Contact hello@sponable.app to exercise these rights.

You may complain to a data protection authority, including the Berlin Commissioner for Data Protection and Freedom of Information. We do not make automated decisions that produce legal or similarly significant effects.