DonutsDelivery.online and DonutStudio are operated by an independent developer registered as a business in Denmark. This page describes what data the website and the app handle, and why. The short version: this site sets no cookies and does not use third-party advertising trackers. It records a small amount of first-party, privacy-respecting usage data so we can understand which pages and downloads are useful.
When you visit, the site may send the page path, product context, referrer, and download-start events to our own EU-hosted server. We do not use cookies or local storage for this. The server stores a rotating one-way hash of the visitor's IP address together with the day, never the raw IP address, so we can estimate daily unique visitors and download starts without building a cross-site profile. You can opt out by enabling your browser's Do Not Track setting.
If you subscribe to the newsletter, we store your email address and the subscription date in a file on our own server, hosted in the EU. Mails are sent from our own mail server. We use the address only to send DonutStudio news, and every mail contains a one-click unsubscribe link that removes your address immediately. Nothing is shared with third parties.
DonutStudio's free edition is activated with an email license. We store the email address you register in order to issue and validate the license key. The license server also sees your IP address when the app validates a license, as any web server does.
Paid licenses are sold through Stripe. Card details go directly to Stripe and never touch our servers; we receive your name, email, and a receipt so we can issue the license. See Stripe's privacy policy for how they handle payment data. VAT is calculated at checkout based on your location.
Like every web server, ours writes standard access logs (IP address, requested page, browser identifier). They are used only for security and debugging and are rotated and deleted automatically.
Pages currently load fonts from Google Fonts and a 3D library from the unpkg CDN, which means those services see your IP address when the page loads. We are moving these onto our own server so that visiting this site contacts no third party at all.
Under the GDPR you can ask us at any time to show, correct, export, or delete the data we hold about you (for most visitors: nothing; for subscribers: one line with your email and a date). Contact us via GitHub or Discord. You can also complain to the Danish Data Protection Agency (Datatilsynet).