Privacy policy
This is an English translation for your convenience. The German version (Datenschutzerklärung) is legally binding.
1. Controller
Filippos Kagkiouzis, Würzburger Straße 2, 60385 Frankfurt am Main, Germany
Email: [email protected], phone: +49 1573 131011
2. In short
Your designs never leave your device. We use no cookies for tracking or advertising and create no user profiles. Personal data is only processed by our hosting provider Cloudflare (when you visit the site and for anonymous visitor statistics), Polar (when you buy) and our email provider (when you write to us).
3. Your designs stay with you
Images, videos and projects you use in HiMockup are processed and stored only in your browser (IndexedDB and localStorage). They are not sent to our servers or to third parties. You can delete them at any time in your browser settings.
4. Hosting and access data
The website runs on Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit, Cloudflare processes technically necessary data: IP address, date and time, page requested, browser and operating system. This is needed to deliver the site and protect it from attacks. The legal basis is our legitimate interest in secure and fast operation (Art. 6(1)(f) GDPR). Cloudflare processes the data on our behalf under a data processing agreement and keeps it only as long as needed for these purposes. We do not analyse access logs ourselves. Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).
5. Data stored in your browser
To keep your settings, designs, projects and your Pro unlock for your next visit, HiMockup stores them in your browser’s storage (localStorage and IndexedDB). This is strictly necessary for the function you requested (§ 25(2) no. 2 TDDDG). No cookies are set for tracking or advertising.
6. Visitor statistics without cookies
We use Cloudflare Web Analytics to understand which pages people visit. The site loads a small script from Cloudflare (static.cloudflareinsights.com) that sends anonymous measurements such as the page visited, the referring page, country, browser and load time to Cloudflare. No cookies are set, nothing is stored in your browser and no profiles of individual visitors are created; the IP address is only used for the transfer. The legal basis is our legitimate interest in a website that meets visitors’ needs (Art. 6(1)(f) GDPR). Cloudflare processes the data on our behalf.
7. Fonts and libraries
All fonts and code libraries are served from our own server. No data is sent to third parties such as Google when they load.
8. Purchases and payment through Polar
Pro and Lifetime are sold by Polar Software Inc., 3500 South DuPont Highway, Dover, DE 19901, USA, as reseller (merchant of record). In the checkout you enter your details directly with Polar (e.g. email, country, payment details); Polar processes them under its own responsibility to handle the purchase, issue invoices and pay taxes. Card payments are processed by the payment provider Stripe. We receive no payment details, only what we need for support and unlocking (e.g. email, product bought, time of order).
After your purchase, Polar sends you back to HiMockup with an order reference. Our server uses it to fetch your licence key from Polar and occasionally checks later whether the key is still valid. We store the key only in your browser. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR). For transfers to the USA, Polar has concluded the EU Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR). More in Polar’s privacy policy.
9. Contact by email
If you write to [email protected], we process your details to answer your request (Art. 6(1)(b) GDPR for questions about a purchase, otherwise point (f)). Emails to this address are received by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, and forwarded to our mailbox at Apple iCloud (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland). We delete your request once it is resolved, unless statutory retention periods apply (e.g. up to six years for business correspondence).
10. Retention
We keep personal data only as long as needed for the purpose or as required by statutory retention periods. Data in your browser stays there until you delete it.
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Just write to [email protected].
Right to object: Where we process data based on our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.