Privacy Policy

Last updated: 3 August 2026

1. Who we are

Animaitor is operated by Die Quadratur UG (haftungsbeschränkt) ("we", "us", "our"), Sierichstraße 120, 22299 Hamburg, Germany, acting as the data controller for personal data processed through the Animaitor service at animaitor.io. Full provider details, including our register entry and contact address, are listed in our Imprint.

2. Personal data we collect

• Account data: email address, authentication identifiers, login credentials.
• Content you upload: SVG logos and generated animations stored in your library.
• Usage data: generations, downloads, feature usage, telemetry, error logs.
• Device data: IP address, browser type, device identifiers, approximate location.
• Support communications: messages you send us.
• Billing data: handled by Paddle (see "Sharing with third parties" below).

3. Purposes and legal basis

• Provide the service (contract performance): account creation, generating and storing animations, processing downloads.
• Security and fraud prevention (legitimate interests): abuse detection, rate limiting, integrity of the service.
• Product improvement (legitimate interests): aggregated analytics and error monitoring.
• Customer support (contract performance / legitimate interests): responding to your requests.
• Legal compliance (legal obligation): tax records, responding to lawful requests.

4. Sharing with third parties

• Paddle: our Merchant of Record. Paddle.com processes all orders, subscriptions, payments, tax, invoicing, and refund handling. Payment data is collected directly by Paddle under Paddle's privacy notice.
• Supabase (EU hosting): our database, authentication, and storage subprocessor. Supabase hosts account data, uploaded logos and SVG files, generated animations, and API keys on infrastructure located in the European Union.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

We do not sell your personal data.

5. International transfers

Some recipients may be located outside the EEA/UK. Where this is the case, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep personal data only as long as needed for the purposes above. Account and content data are retained while your account is active and deleted (or anonymised) on request or within a reasonable period after account closure. Billing records are kept for the period required by tax law.

7. Your rights

Under the GDPR you have the following rights in relation to your personal data:

• Access (Art. 15 GDPR): confirmation of whether we process your data and a copy of it.
• Rectification (Art. 16 GDPR): correction of inaccurate or incomplete data.
• Erasure (Art. 17 GDPR): deletion of your data where the legal conditions are met.
• Restriction (Art. 18 GDPR): restriction of processing in the cases set out by law.
• Notification (Art. 19 GDPR): information to recipients about rectification, erasure, or restriction.
• Data portability (Art. 20 GDPR): receipt of your data in a structured, commonly used, machine readable format.
• Objection (Art. 21 GDPR): objection to processing based on our legitimate interests.

You may also withdraw consent at any time with effect for the future. We respond to requests within one month. Contact us at info@die-quadratur.de to exercise these rights.

7a. Supervisory authority

You have the right to lodge a complaint with a supervisory authority. The authority responsible for the controller is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Hamburg, Germany. You may also contact the supervisory authority of your habitual residence or place of work.

8. Security

We apply appropriate technical and organisational measures including encryption in transit, access controls, and audit logging to protect your data.

9. Cookies

We use strictly necessary cookies for authentication and session management. We do not use advertising cookies. Any analytics cookies are limited and configurable through your browser.

Our hosting platform serves a cookieless analytics script (flock.js) that records aggregated page views and basic technical request data. It does not set cookies, does not track you across other websites, and is not used for advertising or profiling.

10. Changes

We may update this policy. Material changes will be notified by email or in-app notice.