Privacy policy

This is a translation provided for convenience. Only the German version is legally binding: German version.

1. Controller

Lukas-Domenik Sonnenfeld, Anschrift siehe Impressum, Germany, email: sunfieldshops@gmail.com

2. Overview

This website sets no cookies, uses no analytics or advertising services, loads no third-party fonts and embeds no third-party scripts. Form data is only sent to us via the withdrawal function (section 7). The only script is our own order script on the order pages; it runs only in your browser and does not transmit any data itself.

3. Hosting

The website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit, Cloudflare processes technically necessary access data (IP address, time, page requested, browser identifier, referrer) in server logs in order to deliver the site and protect it against misuse. Legal basis: Art. 6(1)(f) GDPR. Cloudflare may process data in the USA; the transfer is based on the EU-US Data Privacy Framework or standard contractual clauses.

4. Ordering

When you order, you enter your name and email address, select your country and state whether you are ordering as a private individual or as a business. From this, the order form creates an order email in your browser, which you send to us with your own email program. We process your name, email address, country, customer type, the language of the order page, order number, product, chosen payment method (PayPal or Stripe), time and your consent to immediate delivery in order to perform the contract, send you the download link and document your consent (Art. 6(1)(b) and (c) GDPR). We need your country to apply the correct VAT rules (Art. 6(1)(c) GDPR). Order data is stored at: Sunfield auf eigenem Rechner in Deutschland. Emails are handled by our email provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (Gmail bzw. Google Apps Script). Soweit Daten in die USA übermittelt werden, geschieht das auf Grundlage des EU-US Data Privacy Framework bzw. von Standardvertragsklauseln. We delete the data once it is no longer needed; retention obligations under tax and commercial law (up to ten years for accounting records) remain unaffected.

5. Payment with PayPal

If you choose PayPal, payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. The PayPal button is a simple link: only when you click it does the PayPal website open, and only then does PayPal receive data from you (including IP address, browser data, payment amount and the details you enter at PayPal). PayPal processes this data under its own responsibility, may set cookies and may carry out a credit or fraud check. From PayPal we receive your name, email address, amount and payment status. Legal basis: Art. 6(1)(b) GDPR. More in PayPal’s privacy policy.

6. Online payment via Stripe

If you choose “Order with obligation to pay – card, Apple Pay, Google Pay, Klarna, SEPA & more” at checkout, the payment button shown after you submit your order takes you to Stripe’s payment page. The provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland (“Stripe”). Data is transferred to Stripe only once you click this payment button; before that, this website does not load any content from Stripe. Stripe processes the data you enter there (name, optionally company name, email address, billing address, payment details such as card number or IBAN), the amount and the product purchased, as well as technical data about your device (for example your IP address), in order to process the payment, prevent fraud and comply with legal obligations.

We do not receive card numbers or other complete payment details. From Stripe we receive your name, company name if provided, email address, billing address, amount, product and payment status in order to send you the download link and issue the invoice. The legal bases are Art. 6(1)(b) GDPR (contract and pre-contractual measures) and Art. 6(1)(c) GDPR (statutory retention obligations under Section 147 of the German Fiscal Code (AO) and Section 14b of the German VAT Act (UStG)). Stripe itself is responsible for fraud prevention and for complying with its own regulatory obligations.

Stripe may transfer data to affiliated companies, in particular to Stripe, Inc. in the USA. According to Stripe, such transfers are based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework or on standard contractual clauses. If you pay with Klarna, Apple Pay, Google Pay or by SEPA Direct Debit, the respective providers additionally process data in accordance with their own privacy notices. On its payment page, Stripe uses cookies and similar technologies that are necessary for secure payment and fraud prevention; this website itself still does not set any cookies. Stripe’s privacy policy: stripe.com/privacy.

7. Withdrawal via the online function

If you use the “Cancel contract” page, your name, order details and email address are sent to us via Cloudflare Workers KV (Cloudflare, Inc., see section 3) and stored there so that we can process your withdrawal and confirm receipt (Art. 6(1)(c) GDPR in conjunction with § 356a BGB, German Civil Code). We delete the details once the withdrawal has been handled and no retention obligations remain.

8. Contact by email

If you write to us, we process your details in order to answer your request (Art. 6(1)(b) or (f) GDPR).

9. The programs themselves

The programs you buy run offline on your device. Your entries are stored in your browser’s local storage and in files you back up yourself. They are not transmitted to us or to third parties.

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR) as well as the right to lodge a complaint with a data protection supervisory authority.

Draft legal text, As of November 2026. To be legally reviewed before going live.