Privacy Policy

1. Scope and controller

This Privacy Policy applies to kontackt.net, Kontackt customer accounts, checkout and payment-confirmation flows, product reviews and comments, license verification, protected downloads, and related communications that link to this policy.

Kontackt.Net GmbH ("Kontackt", "we", "us", or "our") is the controller of personal data covered by this policy. Our contact details are:

2. Data we collect

The information we handle depends on how you use the Store:

• Account data: name, email address, password hash, Google account identifier if you use Google sign-in, account dates, last sign-in information, and account status.
• Order and payment data: order number, product, quantity, price, currency, payment status, payment-provider transaction identifier, customer name and email, and related transaction records. Full payment-card details are handled by the payment provider and are not stored by Kontackt.
• License and delivery data: license key, product, license status, permitted domains where configured, update eligibility, release and download history, and the time a license was last checked.
• Public contribution data: product ratings and reviews, product comments, customer display name, contribution date, and verified-purchase status.
• Technical and security data: IP address, browser and device information, user agent, requested page, referring page, timestamps, session and anti-forgery identifiers, login-attempt information, diagnostic logs, and security events.
• Cookie and preference data: session identifiers, saved interface theme, consent choices, and Google Analytics identifiers and usage information where analytics is used.
• Communications and refund requests: emails, support messages, selected Order, refund request type, explanation, request status, resolution notes, feedback, dispute information, and other correspondence you send to us.

Please do not include passwords, full payment-card details, government identifiers, health data, or other sensitive information in product reviews, comments, email, or support requests unless we specifically request it through an appropriate secure channel.

3. Where data comes from

We collect personal data:

• directly from you when you register, update your profile, check out, review or comment on a product, enter a license key, download a release, or contact us;
• automatically from your browser or device when you use the Store;
• from Google if you choose Google sign-in, including your Google account identifier, verified email address, and name within the permissions shown by Google; and
• from Stripe or another payment provider when it confirms the status and reference of a transaction.

4. How and why we use data

Where we rely on legitimate interests, we consider whether the processing is necessary and balance it against your rights. You may object as described in section 10. We do not make decisions with legal or similarly significant effects based solely on automated processing.

5. Cookies, local storage, and analytics

Cookies and local storage help the Store function, keep accounts signed in, protect forms, remember interface and consent choices, and measure website use. Blocking necessary cookies may prevent account, checkout, review, comment, or download features from working correctly.

We use Google Analytics to understand how visitors use the Store. The service may receive the page URL, IP address, browser or device information, and set identifiers such as _ga. Where consent is required, our legal basis for analytics is consent. You can manage available choices through the cookie banner and can block or clear cookies in your browser. Google explains how it uses information from sites that use its services.

Our cookie notice and preference interface are provided using TermsFeed's cookie-consent tool. Your browser may contact TermsFeed to load that interface.

6. When we share data

We disclose personal data only when needed for the purposes described in this policy:

• to Stripe and other payment providers to process, confirm, refund, or investigate transactions;
• to Google when you choose Google sign-in and when Google Analytics is used;
• to hosting, infrastructure, security, email, cookie-management, support, and other technology providers acting for us;
• to professional advisers, auditors, insurers, or parties involved in a business transaction, subject to appropriate confidentiality duties;
• to authorities or other parties where disclosure is required by law or reasonably necessary to protect rights, users, systems, or the public; and
• to another party when you ask us to share information or give valid consent.

Product reviews and comments are public and display the information described in section 2. Service providers may use personal data only under their agreement with us and applicable law. We do not sell personal data or share it for cross-context behavioural advertising.

7. International transfers

Some providers may process personal data outside the European Economic Area. Where required, we use a lawful transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with appropriate supplementary safeguards. You may contact us for information about safeguards relevant to your data.

8. How long we keep data

We keep personal data only for as long as reasonably necessary for the purpose collected:

• account data while the account is active and for a limited period after closure to complete requests, prevent abuse, or resolve disputes;
• Orders, payment references, invoices, and core transaction records for at least seven years where Dutch tax or accounting law requires it;
• license and product-delivery records for the life of the license and afterward where needed to verify ownership, prevent misuse, or handle claims;
• download logs, login-attempt information, and technical or security logs for the limited period needed to protect the Store and investigate incidents;
• public reviews and comments until you update or delete them through an available feature, ask us to remove them, or they are no longer needed for the product page;
• consent records for as long as needed to demonstrate and honour your choices; and
• communications for as long as needed to answer the request, provide support, manage the customer relationship, or establish or defend legal claims.

When retention is no longer justified, we delete or anonymise the data. A deletion request may not apply to records we must keep by law or reasonably need to establish, exercise, or defend legal claims.

9. Security

We use technical and organisational measures designed to protect personal data, including encrypted transport, password hashing, access controls, anti-forgery protection, signed payment confirmation, protected download paths, authentication safeguards, system maintenance, and backups where appropriate.

No internet service is completely secure. Use a strong, unique password, protect your Google account if connected, keep license keys confidential, and avoid submitting information that is not needed. If you believe your account, license, or data may have been compromised, contact service@kontackt.net promptly.

10. Your privacy rights

Depending on applicable law, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion or restriction of processing;
• receive certain data in a portable format;
• object to processing based on legitimate interests;
• withdraw consent at any time, without affecting earlier lawful processing; and
• complain to a data protection authority.

To exercise a right, email service@kontackt.net. We may ask for information needed to verify your identity and will respond within the period required by law. If you are in the Netherlands, you may also complain to the Autoriteit Persoonsgegevens.

11. Children

Kontackt is a commercial software marketplace and is not directed to children under 16. We do not knowingly collect their personal data without appropriate authorisation. If you believe a child has provided personal data improperly, contact us so we can review and delete it where required.

12. Changes to this policy

We may update this policy when our Store, data practices, providers, or legal obligations change. We will publish the revised policy here, update the effective date, and provide additional notice where a change materially affects your rights or where law requires it.

13. Contact us

Questions, privacy requests, or concerns about this policy can be sent to: