EASY RUST FILTER · LEGAL

Privacy Policy

Last updated: 1 August 2026

This translation is provided for convenience only. In case of discrepancies or differences in interpretation, the German version shall prevail.

Microsoft Clarity usage analytics is optional and remains disabled until you consent in the cookie banner. You can reject it or change your choice at any time through “Cookie settings” in the footer.

1. Controller

2. Data we process

Website access and server logs (Vercel)

When you access the website, IP address, date and time, requested URL, referrer, browser and device information, HTTP status, and technical error and security data may be processed. This serves delivery, stability, abuse prevention and troubleshooting. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure and reliable operation.

Registration, login and confirmation email (Supabase)

We process your email address, internal user ID, authentication and session data, registration time, and information needed for confirmation and password-reset emails. The legal basis is Art. 6(1)(b) GDPR. Security logs are additionally processed under Art. 6(1)(f) GDPR.

Saved Conveyor setups and account

For signed-in users we store setup names, storage units, filters, amount values, plan, subscription status and technical timestamps to provide the selected functions (Art. 6(1)(b) GDPR). Free Test does not permanently save setups to the account.

Payments and subscriptions (Lemon Squeezy)

Checkout, payment, tax calculation, invoicing, refunds and chargebacks are handled by Lemon Squeezy as Merchant of Record. Email, billing, payment, order, customer, product, variant and subscription data may be processed. We do not receive or store complete card or bank details. Legal bases are Art. 6(1)(b) and (c) GDPR.

Webhooks

Lemon Squeezy sends signed events concerning creation, changes, pausing, cancellation, expiry and payment status to our Vercel API. We associate these events with the user account through email or provider identifiers to update the plan and setup limit. The legal basis is Art. 6(1)(b) GDPR. Event IDs may be stored to prevent duplicate processing.

Optional usage analytics (Microsoft Clarity)

If you explicitly consent, we use Microsoft Clarity to understand how visitors use the website and to improve usability. Clarity may process pseudonymous interaction data such as clicks, scrolling, navigation, device and browser information, IP-derived location, session recordings and heatmaps and may store analytics identifiers in cookies or similar browser storage. The legal bases are your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. Without consent the Clarity script is not loaded. You can withdraw consent at any time through “Cookie settings” in the footer; withdrawal does not affect prior lawful processing.

Contact

When you contact us, we process sender address, message, time and necessary metadata. The legal basis is Art. 6(1)(b) GDPR for contractual or pre-contractual matters and otherwise Art. 6(1)(f) GDPR.

3. Recipients and processors

• Vercel Inc. — hosting, delivery, API and server logs.
• Supabase, Inc. — authentication, database and transactional authentication emails.
• Lemon Squeezy / the entity named at checkout — Merchant of Record, payments and subscription management.
• Microsoft Corporation — optional usage analytics through Microsoft Clarity, only after consent.
• Authorities or advisers where required by law or legal defence.

Where providers process data outside the EEA, this is based on applicable safeguards, including adequacy decisions or EU standard contractual clauses. See the privacy policies of Vercel, Supabase, Lemon Squeezy and Microsoft.

4. Retention

Account data and setups are generally stored for the lifetime of the account and deleted or anonymised afterwards unless statutory retention, evidence or security requirements apply. Contract, invoice and payment records are retained for statutory periods. Technical logs are kept only as long as needed for security, troubleshooting and the providers’ operational retention periods.

5. Cookies, browser storage and consent

Strictly necessary cookies or local-storage entries may be used for login, session management, language preferences, security and storing your consent choice. Legal bases are Section 25(2)(2) TDDDG and Art. 6(1)(b) or (f) GDPR. Optional Microsoft Clarity analytics storage is used only after consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. You can change or withdraw your choice through “Cookie settings” in the footer.

6. Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, data portability and objection, and may withdraw consent for the future. You may lodge a complaint with a supervisory authority, in particular the Hessian Commissioner for Data Protection and Freedom of Information.

Send account or data deletion requests to contact@easyrustfilter.com. Password reset and logout are available in the account area.

7. Required data

Without the information required for registration and contract performance, accounts, cloud storage and paid plans cannot be provided. No solely automated decision producing legal or similarly significant effects takes place.

8. Changes

We update this policy when functions, providers or laws change. The version published on this page applies.