← Back

Privacy Policy

Last updated: May 2026 · Applies to users worldwide including the EU and California (CCPA)

1. Data Controller

Chris von Massow's SaaS Tools
Eschersheimer Landstraße 42 · 60322 Frankfurt am Main · Germany
Email: contact@storecheckr.io

2. Data We Collect

When you use the free check
We store a flag in your browser (localStorage) to track that your one free check has been used. No personal data is transmitted to our servers for the free check.


When you make a purchase
We collect your email address, payment information (processed by Stripe), and billing country. This data is used to fulfill your purchase, activate your sessions, and manage your access.


Assessment data
When you run an assessment, we temporarily send your subject description and answers to Anthropic's API to generate your verdict. We do not store your individual answers. The synthesized verdict (score, analysis, recommendation) is stored encrypted in our database and linked to your email only if you choose to save it.


Data stored for access control
Upon purchase, the following data is stored in our database (Upstash Redis):

  • Email address
  • Number of sessions purchased and remaining
  • Purchase date
  • Stripe session ID

3. How We Use Your Data

We use your data to:

  • Activate and manage your purchased decision sessions
  • Send purchase confirmations and access information
  • Send service updates and important notifications
  • Send occasional marketing communications (new features, offers)

Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(a) GDPR (consent for marketing communications).

4. Third-Party Services

Vercel (Hosting)
Vercel Inc., 340 Pine Street Suite 701, San Francisco, CA 94104, USA. We have a Data Processing Agreement with Vercel.


Stripe (Payments)
Stripe Inc., 510 Townsend Street, San Francisco, CA 94103, USA. Payment data is transmitted to Stripe for processing. No payment card details are stored on our servers.


Resend (Email)
Resend Inc., USA. Your email address is stored in Resend for the purpose of sending transactional and marketing emails.


Anthropic (AI Analysis Engine)
Anthropic PBC, 548 Market St, San Francisco, CA 94104, USA. Your assessment subject, the 10 questions, and your YES/UNSURE/NO answers are sent to Anthropic's API to generate your verdict. No other personal data is transmitted.


Upstash (Session & Access Control)
Upstash Inc., USA. Your IP address (24h) and subscriber email (for the duration of your purchased sessions) are stored for access control purposes.

5. Data Transfers

Some of our service providers are located in the United States. Data transfers to the US are carried out under appropriate safeguards including Standard Contractual Clauses (SCCs) as provided by the European Commission.

6. Your Rights (EU/EEA Users – GDPR)

You have the right to: access your personal data, correct inaccurate data, delete your data ("right to be forgotten"), restrict processing, data portability, and object to processing.


To exercise these rights, contact us at contact@storecheckr.io.


You also have the right to lodge a complaint with your local supervisory authority. In Germany: Hessischer Beauftragter für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden.

7. Your Rights (California Users – CCPA)

California residents have the right to: know what personal information is collected, know whether personal information is sold or disclosed, opt out of the sale of personal information, access personal information, and equal service and price regardless of privacy choices.


We do not sell your personal information. To exercise your CCPA rights, contact us at contact@storecheckr.io.

8. Email Unsubscribe

You may unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or by contacting us at contact@storecheckr.io. Transactional emails (purchase confirmations, access information) may still be sent after unsubscribing.

9. Cookies

We use only technically necessary browser storage (localStorage) to track free check usage and cache your authentication state. No tracking or advertising cookies are used. Stripe uses cookies required for payment processing.

10. Data Retention and Deletion

Subscriber emails and session data are retained while your access is active. Saved verdicts for unregistered users automatically expire after 7 days. Purchase records are retained for the legally required period (typically 10 years for tax purposes under German law).


You can permanently delete your account, all saved verdicts, and your credit balance at any time from your verdicts page (signed-in users only). This is immediate and irreversible.

11. Encryption

All verdict content stored in our database is encrypted at rest using AES-256 encryption. Encryption keys are stored separately from the data. All data transmission between your browser and our servers uses TLS (HTTPS).


Your individual YES/UNSURE/NO answers are not stored after your verdict is generated.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.


This Privacy Policy was prepared without legal counsel and does not constitute legal advice.

Legal NoticePrivacy PolicyTerms