Privacy Policy
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on the subject of data protection can be found in our privacy policy listed below.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the "Information about the Responsible Party" section of this privacy policy.
How do we collect your data?
Your data is collected in part by you providing it to us, for example data you enter in a contact form. Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g., internet browser, operating system, or time of page access).
What do we use your data for?
Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data.
2. Hosting
External Hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the host. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website.
3. General Information and Mandatory Disclosures
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
Responsible Party
Leon Schmidt
Johann-Mohr-Weg 10
Apt. 32
22763 Hamburg, Germany
Phone: +49 170 4096032
Email: overlaygenerator@schmidt.ly
Data Retention
Unless a more specific retention period has been stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies.
Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.
4. Data Collection on This Website
Optional account and saved designs
The editor and buying an export can be used without an account. Preview and rendering of the files happen locally in your browser. When you buy a single export and for every unlocked export, the design text and settings are sent to our server temporarily to compute a check value (SHA-256 fingerprint) and verify that the purchase covers this design version. The text is neither stored nor logged. If you voluntarily create an account, we process your email address, confirmation and sign-in times, and the designs you save (name, overlay text and design settings). Sign-in works via a link sent to your email address; we do not store passwords. Data is stored with our backend provider (Lovable Cloud) and is accessible only to your account. Legal basis is Art. 6(1)(b) GDPR. You can delete designs at any time and request account deletion by email.
Payment and export pass
Payments are processed by Stripe. To unlock exports we store only the Stripe checkout session ID, the tariff, the expiry, for single exports the design fingerprint, and time, format and fingerprint of finished exports. We do not store overlay texts. Stripe receives only the fingerprint, never the overlay text.
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources. The collection of this data is based on Art. 6 (1) (f) GDPR.