Privacy policy
Last updated 13 July 2026A privacy policy you can actually read. We collect as little as the sale needs, and we don’t track you around the web.
Who is responsible
The data controller is Andify OÜ, registry code 16025775, VAT number EE102540811, at Luha tn 2-6, 50703 Tartu, Estonia. Questions or requests: hello@ppfengine.com.
What we store, and for how long
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| Order details (email, name, amount, country, VAT ID) | To sell and deliver your presale license | Contract | 7 years (Estonian accounting law) |
| Waitlist email | To send the launch note you asked for | Consent | Until you unsubscribe |
| Consent record (your cookie choice, timestamp, banner version, user agent) | To prove your choice under GDPR | Legal obligation | 2 years |
| Server logs (IP, request) | Security and debugging | Legitimate interest | 14 days |
We do not store your scans, templates, or any car data. PPF Engine is a desktop app and that data never leaves your computer.
Who processes data for us
- Creem: merchant of record for payments, tax, refunds, and invoices (privacy).
- Resend: transactional and launch emails (privacy).
- Hetzner: EU hosting (privacy).
- Plausible: cookieless, aggregate analytics, EU-hosted (data policy).
Analytics
We use Plausible, which is cookieless and stores no persistent identifier: no ad trackers, no fingerprinting, no cross-site profile. You can decline it in the cookie banner regardless.
International transfers
Creem processes payment data under its privacy policy and applicable transfer safeguards. Our hosting and the order records we keep stay in the EU.
Your rights
You can ask us to access, correct, export, or delete your data, or to object to a use of it, and you can withdraw consent at any time (including reopening the cookie banner from the footer). Email hello@ppfengine.com. You may also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).