This Privacy Policy explains what happens to your personal data when you create or use an Uninspired account, pay for a product, take part in our affiliate programme, or subscribe to our newsletter. These account services are shared across our products; each product's own privacy policy points here for account, billing, and tracking-consent details.

The uninspired.studio marketing website does not require an account. Its cookie banner, analytics, and newsletter are covered here.

Who we are

Hassel und Kolb GbR

Neuendorfer Straße 102

13585 Berlin, Germany

E-mail: hello@uninspired.studio

We are the data controller under the GDPR. Where you allow advertising measurement, we act as joint controllers with Meta for that collection (see below).

Hosting

We use Cloudflare to host and deliver the accounts service and to store your account data. Your account data is stored in the European Union. Other processing by Cloudflare (for example delivering the site or security logs) may take place outside the EU.

• Provider: Cloudflare, Inc., USA — privacy policy.
• Legal basis: Art. 6(1)(b) GDPR (providing your account) and Art. 6(1)(f) GDPR (secure operation).
• Transfers outside the EU rely on Standard Contractual Clauses and/or the EU-US Data Privacy Framework, where applicable.

Account data

To run your account we process:

• E-mail address (required)
• Name (optional)
• Data needed to sign you in without a password (a login link or code sent to your e-mail, or a passkey). We never receive biometric data or private keys; those stay on your device.

We do not offer social logins (Google, Facebook, or similar).

Legal basis: Art. 6(1)(b) GDPR. We keep this data while your account exists, and longer where the law requires.

Payments

Purchases are processed by Paddle as merchant of record (payment, tax, invoices). Some older subscriptions are still handled by Stripe. When you pay, those providers process billing data under their own terms. Cookies that are necessary to complete a payment may be set when you open checkout.

• Paddle.com Market Limited, UK — privacy policy
• Stripe Payments Europe, Ltd, Ireland — privacy policy

Legal basis: Art. 6(1)(b) GDPR. Transfers rely on Standard Contractual Clauses where applicable.

Affiliates

We use Tolt (USA) to run our referral programme. If you arrive via a referral, we store that association on your account. We do not send your e-mail address to Tolt; conversions are reported with a pseudonymous identifier. This is not advertising tracking and does not depend on cookie consent.

Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR. Transfers to the US rely on Standard Contractual Clauses. Tolt privacy policy.

Newsletter

We use Plunk to send newsletters. You confirm your e-mail (double opt-in). We use your e-mail (and optional name) only for that newsletter and basic open/click measurement. You can unsubscribe at any time. This is separate from cookie consent.

Legal basis: Art. 6(1)(a) GDPR. Plunk privacy policy.

Cookies and tracking

A cookie banner lets you choose analytics and marketing separately. We store that choice so we can honour it across Uninspired accounts, checkout, uninspired.studio, and the product websites and apps that show the same banner. Until you choose, we treat both as declined. The Unpinned browser extension does not use this choice (see that product’s privacy policy).

Necessary (no extra consent): keeping you signed in, remembering this choice, security, and completing payment.

Analytics (if you agree): we use PostHog to understand how the service is used (pages and actions, plus technical data such as IP address and device). Without your agreement this is done without storing identifiers on your device and without using your e-mail. With your agreement we may store identifiers on your device and link usage to your account ID only — still not your e-mail. For a few account events (such as sign-up and purchase) our server also reports the event to PostHog directly. Without analytics consent it uses a pseudonymous ID (a salted hash of your account ID) instead of your account ID, so we can count these events and delete them when you delete your account. Legal basis without cookies: Art. 6(1)(f) GDPR; with cookies: Art. 6(1)(a) GDPR and § 25 (1) TDDDG.

Session recording: on the sites and apps that show our cookie banner, if you allow analytics, PostHog also records a sample of visits (from 1% to 100%, depending on the page) so we can find bugs and improve checkout and login. All text and form inputs are masked, and so is text in element attributes such as image descriptions, labels and placeholders. Query strings and share-link passphrases are removed from recorded addresses. Canvas content and the content of network requests are not recorded. Console logs are not recorded. Recordings are stored with PostHog EU (eu.i.posthog.com) and deleted after 30 days. Legal basis: Art. 6(1)(a) GDPR and § 25 (1) TDDDG; you can withdraw consent at any time in Cookie Settings.

Marketing (if you agree): we use Meta advertising tools so we can measure campaigns. Meta may set identifiers on your device and receive usage data. We do not send your e-mail to Meta for this. If you allowed marketing when you buy on the web, our server also reports that purchase to Meta (Conversions API): product, price and currency, together with your IP address, browser user agent, the Meta cookie IDs (_fbp/_fbc) and a hashed account ID, so Meta counts the purchase once. No e-mail address or phone number is sent. For that collection and transfer we and Meta Platforms Ireland Ltd. are joint controllers (Art. 26 GDPR); Meta is responsible for what it does afterwards. Legal basis: Art. 6(1)(a) GDPR and § 25 (1) TDDDG. Transfers rely on Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

You can decline or withdraw these choices at any time via the banner. PostHog privacy.

Who receives your data

How long we keep data

Account data while the account exists; billing as required by tax law; newsletter until you unsubscribe; referral data as long as needed to run the programme and meet legal duties; security logs for a short period.

Deletion

You can delete your account in settings or by e-mailing hello@uninspired.studio. We then delete your personal data from our systems and from the processors above, except where we must keep it by law. Data Meta collected after marketing consent is held by Meta. Usage data from before you allow analytics is not combined with your identified account.

Your rights

Under Articles 15–21 GDPR you may access, correct, erase, restrict, or object to processing, receive a portable copy, and withdraw consent for the future. Contact hello@uninspired.studio.

You may also complain to your supervisory authority. In Berlin:

Berliner Beauftragte für Datenschutz und Informationsfreiheit

https://www.datenschutz-berlin.de

California (CPRA)

California residents may request to know, delete, or correct personal information, and to opt out of “sharing” for cross-context advertising. We do not sell personal information. The only “sharing” of that kind is Meta advertising measurement if you allow marketing. Decline or withdraw that choice to opt out. E-mail hello@uninspired.studio with the subject “California Privacy Rights Request”.

Security

We use TLS in transit and standard technical and organisational measures. We do not use automated decision-making that produces legal or similarly significant effects.

Changes

We will update this page if our processing changes in a way that matters to you.

Last updated: 3 November 2026