Uninspired Accounts Privacy Policy
Sep 24, 2025
This Privacy Policy explains what happens to your personal data when you create or use an Uninspired account, pay for a product, take part in our affiliate programme, or subscribe to our newsletter. These account services are shared across our products; each product's own privacy policy points here for account, billing, and tracking-consent details.
The uninspired.studio marketing website is separate and does not require an account.
Who we are
Hassel und Kolb GbR
Neuendorfer Straße 102
13585 Berlin, Germany
E-mail: hello@uninspired.studio
We are the data controller under the GDPR. Where you allow advertising measurement, we act as joint controllers with Meta for that collection (see below).
Hosting
We use Cloudflare to host and deliver the accounts service and to store your account data. Your account data is stored in the European Union. Other processing by Cloudflare (for example delivering the site or security logs) may take place outside the EU.
- Provider: Cloudflare, Inc., USA — privacy policy.
- Legal basis: Art. 6(1)(b) GDPR (providing your account) and Art. 6(1)(f) GDPR (secure operation).
- Transfers outside the EU rely on Standard Contractual Clauses and/or the EU-US Data Privacy Framework, where applicable.
Account data
To run your account we process:
- E-mail address (required)
- Name (optional)
- Data needed to sign you in without a password (a login link or code sent to your e-mail, or a passkey). We never receive biometric data or private keys; those stay on your device.
We do not offer social logins (Google, Facebook, or similar).
Legal basis: Art. 6(1)(b) GDPR. We keep this data while your account exists, and longer where the law requires.
Payments
Purchases are processed by Paddle as merchant of record (payment, tax, invoices). Some older subscriptions are still handled by Stripe. When you pay, those providers process billing data under their own terms. Cookies that are necessary to complete a payment may be set when you open checkout.
- Paddle.com Market Limited, UK — privacy policy
- Stripe Payments Europe, Ltd, Ireland — privacy policy
Legal basis: Art. 6(1)(b) GDPR. Transfers rely on Standard Contractual Clauses where applicable.
Affiliates
We use Tolt (USA) to run our referral programme. If you arrive via a referral, we store that association on your account. We do not send your e-mail address to Tolt; conversions are reported with a pseudonymous identifier. This is not advertising tracking and does not depend on cookie consent.
Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR. Transfers to the US rely on Standard Contractual Clauses. Tolt privacy policy.
Newsletter
We use Plunk to send newsletters. You confirm your e-mail (double opt-in). We use your e-mail (and optional name) only for that newsletter and basic open/click measurement. You can unsubscribe at any time. This is separate from cookie consent.
Legal basis: Art. 6(1)(a) GDPR. Plunk privacy policy.
Cookies and tracking
A cookie banner lets you choose analytics and marketing separately. We store that choice so we can honour it across Uninspired accounts, checkout, and the product websites and apps that show the same banner. Until you choose, we treat both as declined. The Unpinned browser extension does not use this choice (see that product’s privacy policy).
Necessary (no extra consent): keeping you signed in, remembering this choice, security, and completing payment.
Analytics (if you agree): we use PostHog to understand how the service is used (pages and actions, plus technical data such as IP address and device). Without your agreement this is done without storing identifiers on your device and without using your e-mail. With your agreement we may store identifiers on your device and link usage to your account ID only — still not your e-mail. Legal basis without cookies: Art. 6(1)(f) GDPR; with cookies: Art. 6(1)(a) GDPR and § 25 (1) TDDDG.
Marketing (if you agree): we use Meta advertising tools so we can measure campaigns. Meta may set identifiers on your device and receive usage data. We do not send your e-mail to Meta for this. For that collection and transfer we and Meta Platforms Ireland Ltd. are joint controllers (Art. 26 GDPR); Meta is responsible for what it does afterwards. Legal basis: Art. 6(1)(a) GDPR and § 25 (1) TDDDG. Transfers rely on Standard Contractual Clauses and/or the EU-US Data Privacy Framework.
You can decline or withdraw these choices at any time via the banner. PostHog privacy.
Who receives your data
| Purpose | Recipient | Safeguard |
|---|---|---|
| Hosting and storage | Cloudflare, Inc. | DPA; SCCs / DPF where data leaves the EU |
| Usage analytics | PostHog | DPA; SCCs / DPF where applicable |
| Payments | Paddle; Stripe (older subscriptions) | DPA; SCCs where applicable |
| Newsletter | Plunk | DPA |
| Referrals | Tolt, Inc. | DPA; SCCs |
| Advertising measurement (only if you agree) | Meta Platforms Ireland Ltd. | Art. 26; SCCs / DPF |
How long we keep data
Account data while the account exists; billing as required by tax law; newsletter until you unsubscribe; referral data as long as needed to run the programme and meet legal duties; security logs for a short period.
Deletion
You can delete your account in settings or by e-mailing hello@uninspired.studio. We then delete your personal data from our systems and from the processors above, except where we must keep it by law. Data Meta collected after marketing consent is held by Meta. Usage data from before you allow analytics is not combined with your identified account.
Your rights
Under Articles 15–21 GDPR you may access, correct, erase, restrict, or object to processing, receive a portable copy, and withdraw consent for the future. Contact hello@uninspired.studio.
You may also complain to your supervisory authority. In Berlin:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
https://www.datenschutz-berlin.de
California (CPRA)
California residents may request to know, delete, or correct personal information, and to opt out of “sharing” for cross-context advertising. We do not sell personal information. The only “sharing” of that kind is Meta advertising measurement if you allow marketing. Decline or withdraw that choice to opt out. E-mail hello@uninspired.studio with the subject “California Privacy Rights Request”.
Security
We use TLS in transit and standard technical and organisational measures. We do not use automated decision-making that produces legal or similarly significant effects.
Changes
We will update this page if our processing changes in a way that matters to you.
Last updated: 18 September 2026