Privacy Policy

Last updated: October 14, 2026

This policy explains what personal data Pingefy collects when you visit pingefy.com, buy a product or sign up for our emails, why we collect it, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The controller responsible for data processing on this website is:

Pingefy.com
Frauenplatz 3
96049 Bamberg
Germany
Email: [email protected]

2. Summary

  • We only collect what we need to run the shop, deliver your downloads and improve the site.
  • Analytics and marketing tools only run if you agree in our cookie banner.
  • We never sell your data.
  • You can ask us to see, correct or delete your data at any time.

3. Legal bases

We process data based on Art. 6(1) GDPR:

  • (a) Consent – e.g. analytics, marketing cookies, newsletter. You can withdraw consent at any time.
  • (b) Contract – processing your order and delivering your download.
  • (c) Legal obligation – e.g. keeping invoices for tax purposes.
  • (f) Legitimate interest – running a secure, working website.

For cookies and similar technologies, we also rely on § 25 TDDDG (German Telecommunications Digital Services Data Protection Act): non-essential cookies are only set with your consent.

4. Hosting and server logs

This website is hosted by Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA. When you visit the site, the server automatically logs technical data such as your IP address, browser type, operating system, referring page and time of access. This is needed to deliver the site and keep it secure (Art. 6(1)(f) GDPR). Data may be processed on servers outside the EU. Where this happens, transfers are based on the EU Commission’s Standard Contractual Clauses.

5. Cloudflare

We use Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA) to protect and speed up the website and to hide email addresses from spam bots. Traffic passes through Cloudflare’s network, which processes your IP address and technical request data. Legal basis: Art. 6(1)(f) GDPR (security and performance). Cloudflare is certified under the EU-US Data Privacy Framework.

6. Website security (Wordfence)

We use the security plugin Wordfence (Defiant, Inc., 1700 Westlake Ave N Ste 200, Seattle, WA 98109, USA) to protect the site from attacks. To do this, it checks visitors’ IP addresses and requests against known threats and may send IP addresses to Defiant. Legal basis: Art. 6(1)(f) GDPR (security). Transfers to the USA are based on Standard Contractual Clauses.

7. Cookies and consent

We use the consent tool Complianz to ask for your permission before setting non-essential cookies. Essential cookies (e.g. for the shopping cart, checkout and saving your cookie choice) are always active. You can change or withdraw your consent at any time via “Manage consent” at the bottom of every page.

8. Orders and payments

When you buy a product, we collect your name, email address, billing address and order details through our shop system (WooCommerce). We need this to process your order, send your download link and invoice, and handle support requests (Art. 6(1)(b) GDPR). Invoices are kept for up to 10 years, as required by German tax law (Art. 6(1)(c) GDPR).

Card payments are handled by WooPayments, provided by Automattic (Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Place, Dublin, D02 AY86, Ireland), with payment processing by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Your card details go directly to the payment provider. We never see or store your full card number. Stripe also uses your data to prevent fraud. More information: stripe.com/privacy.

9. Contact form and email

If you contact us via the form or by email, we store your name, email address and message to answer you (Art. 6(1)(b) or (f) GDPR). We delete this data once your request is resolved, unless we must keep it by law.

10. Free Starter Kit and newsletter (Brevo)

If you sign up for the free Starter Kit, we use your email address to send you the kit and occasional emails about new releases (Art. 6(1)(a) GDPR). These emails are sent with Brevo (Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany), which stores your email address and may record whether emails are opened or links clicked, so we can improve our emails. You can unsubscribe at any time via the link in every email. We delete your email address after you unsubscribe. More information: brevo.com/legal/privacypolicy.

11. Google services (with your consent)

The following services are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. They only run after you consent (Art. 6(1)(a) GDPR, § 25 TDDDG):

  • Google Tag Manager – a tool that loads our other tracking tags. It does not itself build user profiles.
  • Google Analytics 4 – helps us understand how visitors use the site (pages viewed, time on site, device type, approximate location). IP addresses are not stored in full.
  • Google Ads conversion tracking – tells us whether a visit from one of our Google ads led to a purchase. We only see anonymous totals.

Data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework, which the EU Commission recognises as providing adequate protection. More information: policies.google.com/privacy.

12. Fonts

Fonts on this website are hosted locally on our own server. No connection to Google’s font servers is made when you load a page.

13. Social media links

Our site links to our Instagram, YouTube and TikTok profiles. These are plain links: no data is sent to these platforms until you click one. After that, the platform’s own privacy policy applies.

14. Backups

We regularly back up the website, including shop data, to protect against data loss (Art. 6(1)(f) GDPR). Backups are made with UpdraftPlus and stored on our hosting server and in Dropbox (Dropbox International Unlimited Company, One Park Place, Hatch Street Upper, Dublin 2, Ireland). Only a limited number of recent backups are kept; older ones are deleted automatically.

15. Your rights

You have the right to:

  • Access the data we hold about you (Art. 15 GDPR)
  • Have incorrect data corrected (Art. 16)
  • Have your data deleted (Art. 17)
  • Restrict processing (Art. 18)
  • Receive your data in a portable format (Art. 20)
  • Object to processing based on legitimate interest (Art. 21)
  • Withdraw consent at any time, with effect for the future (Art. 7(3))

To use any of these rights, email us at [email protected].

You also have the right to complain to a data protection authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

16. Changes to this policy

We may update this policy when our website or the law changes. The current version is always available on this page