Privacy Policy

1. Data Controller

2. General Information About Data Processing

We process personal data only where necessary to provide our website, user accounts, digital products and related functionality, or where another lawful basis for processing applies.

Personal data means any information relating to an identified or identifiable natural person.

3. Hosting and Technical Provision

Our website is hosted and delivered using infrastructure provided by Vercel.

When you access the website, technically necessary information may be processed, including your IP address, date and time of access, requested content, browser information and technical log data.

This processing is necessary to provide the website securely and reliably, diagnose technical problems and protect the service against misuse.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically reliable operation of our online service.

4. User Accounts and Authentication

We use Supabase to create and manage AshenCodex user accounts and authentication.

The following information may be processed in this context:

• Email address
• Authentication and account information
• Technical identifiers associated with the user account
• Registration and login timestamps

This information is processed to create and manage your account and to provide the AshenCodex features associated with it.

The legal basis is Art. 6(1)(b) GDPR where processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract. Where applicable, processing may also be based on Art. 6(1)(f) GDPR, particularly for the secure administration of user accounts.

5. Use of AshenCodex and Product Data

When you use AshenCodex, we store the application data required to provide the relevant functionality.

This may include preferences, product access, activation status and information that you enter within an AshenCodex digital product.

We process this information to provide product functionality, retain your preferences and associate your product access with your user account.

The legal basis is Art. 6(1)(b) GDPR.

6. Product Access and Activation Codes

Digital products may use individual activation or redemption codes.

When a code is redeemed, we process the necessary code and assignment information in order to verify the code and permanently associate the relevant product access with an AshenCodex user account.

The legal basis is Art. 6(1)(b) GDPR.

7. Paddle Payments and Marketplace Orders

When a product is purchased through Paddle Checkout or through a marketplace such as Etsy, we receive order information necessary to verify payment and provide digital access.

This may include order and transaction identifiers, product or listing information, quantity, payment status and other order data necessary for the assignment and delivery of the purchased product.

We use this information only where necessary to verify a paid order, generate or assign product access, prevent duplicate redemption and fulfil the purchase.

The legal basis is Art. 6(1)(b) GDPR.

Paddle acts as merchant of record for purchases processed through Paddle Checkout and handles payment details under its own privacy terms. Etsy processes marketplace orders independently under its own privacy policy.

8. Contact

If you contact us by email or through another contact method provided by AshenCodex, we process the information you provide in order to respond to your request.

Where your request relates to a contract or pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR.

In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the appropriate handling of enquiries and support requests.

9. Cookies and Local Storage

AshenCodex may use technically necessary browser storage mechanisms in order to provide essential functionality such as authentication, session management and local user preferences.

Where such storage is strictly necessary, it is used solely to provide the functionality requested by you.

AshenCodex currently does not use analytics or marketing tracking services.

10. Storage Period

Personal data is stored only for as long as necessary for the purpose for which it was collected or where statutory retention obligations require continued storage.

Where statutory retention or documentation obligations apply, relevant information may be stored for the duration of those obligations and subsequently deleted or anonymised unless another legal basis permits further processing.

11. Recipients and Service Providers

We disclose personal data only where this is necessary to provide our services, fulfil a contract, comply with a legal obligation or where another lawful basis permits the disclosure.

Recipients may include technical service providers used for hosting, database services and authentication infrastructure.

12. International Data Transfers

The use of international technology providers may involve the processing of personal data outside the European Union or the European Economic Area.

Where such transfers take place, they are carried out only in accordance with the requirements of Art. 44 et seq. GDPR, including, where applicable, on the basis of an adequacy decision or appropriate safeguards.

13. Your Rights

Subject to the applicable legal requirements, you have the following rights regarding your personal data:

• Right of access under Art. 15 GDPR
• Right to rectification under Art. 16 GDPR
• Right to erasure under Art. 17 GDPR
• Right to restriction of processing under Art. 18 GDPR
• Right to data portability under Art. 20 GDPR
• Right to object under Art. 21 GDPR

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

To exercise your rights, please contact us at support@ashencodex.studio.

14. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

15. Changes to This Privacy Policy

We may update this Privacy Policy where our services, service providers or legal requirements change.

The version currently published on this page applies.