Privacy policy
Who is responsible
march second GmbH, Hornau 9, 87600 Kaufbeuren, Germany. Managing director: Fabian Warmdt. Email: hello@homebakeryspreadsheets.com.
Reading the site
Our pages set no cookies and send nothing to analytics until you agree, except the checkout cookie described below, which is set only when you press a buy button. Our hosting provider, Vercel, processes the technical data every web request carries, such as your IP address, to deliver the pages.
Analytics, only with your consent
If you choose “Accept” on the consent bar, the site loads Google Analytics 4 to count visits so we can see which pages help people find what they need. If you choose “Reject”, or choose nothing, no analytics request is made. Your choice is kept in this browser so the bar does not ask again. You can change it with the “Cookie settings” link in the footer. Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG.
Buying a product
When you press a buy button, our server sets one cookie whose name starts with fdg_checkout_capability. It holds a random value that lets a second click reopen the same checkout instead of starting a new order. The cookie is sent only over HTTPS and only to our checkout endpoint, this site's scripts cannot read it, and it expires after 24 hours. It is strictly necessary for the purchase you asked for, so it needs no consent.
Payment happens on Stripe Checkout. Stripe collects your email address and payment details. We never see your card details.
Our order records hold the product, price, currency, Stripe's checkout and payment references, and the time of purchase. They do not hold your name, postal address or card details.
After payment we read your email address from Stripe once and attempt a receipt through Resend. The download does not depend on that email arriving. Your email address is not stored in our order records.
Order records and the delivered files are kept with Supabase.
We keep order records as long as German law requires, generally up to 10 years.
Legal basis: performance of the contract, Art. 6(1)(b) GDPR, and our legal duty to keep accounting records, Art. 6(1)(c) GDPR.
Writing to us
Email you send to hello@homebakeryspreadsheets.com is processed by our email provider, Resend. We use it to answer you. Legal basis: Art. 6(1)(b) or (f) GDPR.
Service providers
Vercel (hosting), Supabase (database and file storage), Stripe (payment), Resend (email) and, only after your consent, Google Analytics 4 (analytics).
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection under Articles 15 to 21 GDPR, and to withdraw consent at any time with effect for the future. Write to hello@homebakeryspreadsheets.com. You may also complain to a data protection supervisory authority.