Privacy Policy

Controller within the meaning of the General Data Protection Regulation (GDPR):

Honigdachs / Josef Kujawski
Dagobertstr. 30
50668 Cologne
Germany

Email: info@tablehammer.com

The protection of your personal data is important to us. We process your data exclusively on the basis of legal provisions (GDPR, BDSG, TMG).

In this privacy policy, we inform you about the most important aspects of data processing within our website.

Lovable / Supabase

This website is hosted by Lovable (GPT Engineer Inc.). Backend services (database, authentication, file storage) are provided by Supabase Inc.

When accessing our website, information is automatically stored in server log files:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• Browser used and possibly the operating system

The legal basis for data processing is Art. 6 para. 1 lit. f GDPR (legitimate interest). The legitimate interest lies in the provision and security of the website.

More information: Lovable Privacy Policy, Supabase Privacy Policy

Google Cloud Storage

Digital product downloads are delivered via Google Cloud Storage (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

When downloading files, your IP address is transmitted to Google servers. The legal basis is Art. 6 para. 1 lit. b GDPR (contract performance).

More information: Google Cloud Privacy Notice

We use the fonts Syne, Cinzel, and UnifrakturMaguntia on this website. These fonts are hosted locally on our server and are not loaded from external servers (such as Google Fonts).

Therefore, no transfer of your IP address or other personal data to Google or other third parties takes place in connection with fonts.

Our website uses cookies and similar technologies. We distinguish between essential cookies (always active) and optional cookies(only with your consent).

Essential Cookies (Always Active)

• Authentication Session (localStorage): Stores your login session securely
• Cookie Consent (localStorage): Remembers your cookie preferences
• UI Preferences (localStorage): Stores sidebar state and currency selection

The legal basis for essential cookies is Art. 6 para. 1 lit. f GDPR (legitimate interest).

Analytics Cookies (With Consent)

With your consent, we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyze website usage and improve our services.

Data collected includes:

• Pages visited and time spent
• Referral source
• Device and browser information
• Approximate location (country/city level)

IP addresses are anonymized. The legal basis is Art. 6 para. 1 lit. a GDPR (consent).

More information: Google Privacy Policy

Marketing Cookies (With Consent)

With your consent, we use Google Ads Conversion Tracking to measure the effectiveness of our advertising campaigns.

Data collected includes:

• Conversion events (e.g., purchases)
• Ad click data
• Device and browser information

The legal basis is Art. 6 para. 1 lit. a GDPR (consent).

More information: Google Ads Privacy

Managing Your Consent

You can manage your cookie preferences at any time by clicking the cookie settings in the footer or by clearing your browser's local storage. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

Third-Party Cookies: When using payment services (Stripe), cookies may be set by the payment provider on their domain during checkout.

Stripe

We use Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) for payment processing.

When you make a purchase, the following data is transmitted to Stripe:

• Email address
• Payment information (credit card, etc.)
• Billing address (if provided)
• IP address
• Browser and device information

Stripe processes this data to execute the payment and for fraud prevention. The legal basis is Art. 6 para. 1 lit. b GDPR (contract performance).

More information: Stripe Privacy Policy

To display prices in your local currency, we detect your approximate location based on your IP address using the ip-api.com service.

Data processed:

• IP address (not stored permanently)
• Country code (used only for currency selection)

No personal data is stored from this process. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in providing user-friendly pricing).

When you create a user account on our website, we process the following data:

• Email address
• Password (stored encrypted using industry-standard hashing)
• Time of registration
• Purchase history (linked to your account)
• Download history (for rate limiting purposes)

The legal basis for this data processing is Art. 6 para. 1 lit. b GDPR (contract performance) and Art. 6 para. 1 lit. a GDPR (consent).

Our website contains links to external services and social media platforms. When you click on these links, you will be redirected to the respective platforms.

Linked Platforms:

• Instagram (Meta Platforms Ireland Limited)
• Facebook (Meta Platforms Ireland Limited)
• Pinterest (Pinterest Europe Ltd.)
• Discord (Discord Inc.)
• Patreon (Patreon Inc.)
• MyMiniFactory
• Cults3D

Please note that when using these services, their respective privacy policies apply. Data processing only occurs after actively clicking on the respective links.

We retain your data for the following periods:

• Account data: Until account deletion or request for erasure
• Purchase records: 10 years (legal retention requirement for tax purposes)
• Download logs: 12 months (for rate limiting and support purposes)
• Server logs: 30 days

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You can request information about your processed data.
• Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You can request deletion of your data.
• Right to restriction (Art. 18 GDPR): You can request restriction of processing.
• Right to data portability (Art. 20 GDPR): You can receive your data in a common format.
• Right to object (Art. 21 GDPR): You can object to processing.
• Right to withdraw consent (Art. 7 GDPR): You can withdraw consent at any time.

To exercise your rights, please contact: info@tablehammer.com

Some of our service providers are based in the United States. Data transfers to the US are based on:

• EU-U.S. Data Privacy Framework (for certified providers)
• Standard Contractual Clauses (SCCs) approved by the EU Commission

US-based providers: Supabase Inc., Google LLC, Stripe Inc., Discord Inc., Patreon Inc.

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.

The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
www.ldi.nrw.de

We use the widely used SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. You can recognize whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in your browser's address bar.

We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

This privacy policy is currently valid as of January 2026.

Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.