Privacy Policy

1. Data controller

Responsible for data processing: Dr. Benjamin Hippchen, Dennis Schlehuber, Dr. Pascal Giessler · Am Kniebrecher 21 · 66606 Sankt Wendel · E-Mail: hello@extrain.io

2. Your photos

Uploaded photos are used solely to create your coloring book and are stored in the EU. For image processing they are sent to our AI provider and are not stored there permanently.

• Automatic deletion: 14 days after your book is finished, the original photos are deleted automatically and irreversibly. The finished coloring book (line art, PDF) contains no photos and stays available.
• Immediate deletion: Under "My books" you can remove the photos at any time with "Delete photos now".
• Deleting a book: If you delete a book, all related files — photos, coloring pages and PDF — are completely removed from our storage.

3. Order and payment data

Payment is handled by Stripe; we do not store any card data. For each order we store the child's name (for the cover), theme and difficulty, optional motif details, and the email address provided by Stripe for invoicing. Legal basis: Art. 6(1)(b) GDPR.

4. Account and sign-in

To create and manage your books you sign in via our authentication service (Keycloak/SSO). Your books are linked to your account. For this we store your account identifier and the email address you provide. Legal basis: Art. 6(1)(b) GDPR.

5. Analytics and error diagnostics

We run self-hosted, GDPR-compliant tools for product analytics (OpenPanel) and error diagnostics (Sentry) on servers in the EU. Children's names, photos and email addresses are technically filtered out and never transmitted. No data is shared with advertising networks.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), as well as to lodge a complaint with a supervisory authority. Contact us at hello@extrain.io.