Privacy Policy
Last updated: 2026-03-05
1. Controller
Filip Corluka
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Germany
Email: [email protected]
2. Local image processing and uploads
Original photos are processed locally in your browser (e.g., via Web Workers) and are not uploaded.
Only the final mosaic may be uploaded when you request a paid export or place a print order.
For print orders, the final mosaic and shipping details are shared with print fulfillment partners.
Shipping details may include your name, address, email, and phone number (if provided).
3. Hosting, CDN/security, and logs
Our website is hosted by Netcup and uses Cloudflare as CDN/security layer.
We may process server and security logs (for example IP, request time, path, status, and user agent) for security, abuse prevention, and troubleshooting for a limited period.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable website operation).
4. Cookies, localStorage, and IndexedDB
We do not use third-party analytics or tracking cookies/services.
We use functional cookies `mf_country` and `mf_currency` to show local currency pricing and improve checkout defaults.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in localized pricing and a smoother checkout flow).
You can clear these cookies in your browser settings.
The site will still work, but prices and checkout defaults may be less accurate.
localStorage may store delivery details (country/postal), pending checkout markers, capability memory, and an anonymous analytics session id.
We also process a small set of first-party product analytics events (for example landing/create/render/checkout steps) to understand funnel performance.
We do not use third-party analytics services and do not track image contents or file names for analytics.
IndexedDB may temporarily store a quick-start file for convenience between landing and editor; it is stored on your device only and cleared after consumption.
5. Third parties / processors
We use Stripe for payment checkout and payment processing.
We use Brevo for transactional emails (for example order/download notifications).
Cloudflare is used for CDN/security delivery.
We use Frankfurter API exchange rates (fetched server-side) to display approximate local currency prices.
For print orders only, final mosaic files and shipping details are shared with print fulfillment partners.
Some service providers may process data outside the EU/EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
6. Contact by email
If you contact us by email, we process your information to handle your request and follow-up questions.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in efficient communication).
7. Withdrawal and cancellation requests
If you submit a withdrawal or cancellation request through our request form, we process the email address, order reference, request type, message/reason, timestamps, request status, matched order references where available, and technical metadata such as user agent where collected.
We use this data to handle customer requests, document receipt and review, and meet legal/compliance and support obligations.
Legal basis: Art. 6(1)(b) GDPR (contractual communication) and Art. 6(1)(f) GDPR (legitimate interest in documenting and handling customer requests).
8. Retention
We store order and payment-related records as needed to fulfill orders and comply with legal obligations. Technical cache and operational records may also be stored for platform reliability and fraud/security prevention.
9. Your rights
You have rights under the GDPR, including access, rectification, erasure, restriction, data portability, and objection. If processing is based on consent, you can withdraw consent at any time with effect for the future.
10. Complaint to a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement.
11. Changes to this Privacy Policy
We may update this Privacy Policy when necessary due to technical or legal changes.