Privacy Policy

Last updated: April 2026

1. Who We Are

Mark-42 Studio ("we", "us") operates web applications and services under the mark-42.co domain. Contact: hello@mark-42.co.

2. Data We Collect

We collect only what is necessary to provide our services:

Account data: email address, display name when you create an account.
Usage data: pages visited, features used, timestamps. Collected via self-hosted analytics (no third-party trackers).
Technical data: IP address, browser type, device type — for security and performance monitoring.

3. How We Use Your Data

Provide and improve our services
Send transactional emails (account confirmation, password reset)
Monitor service health and security
Aggregate analytics to understand usage patterns (no individual profiling)

4. Data Storage and Security

All data is stored on infrastructure hosted in Hetzner Cloud (Nuremberg, Germany, EU). Data is encrypted in transit (TLS) and at rest. We use industry-standard security practices including firewalls, secret management (HashiCorp Vault), and regular backups.

5. Data Retention

Account data: retained while your account is active, deleted within 30 days of account deletion.
Usage analytics: aggregated, retained for 180 days.
Server logs: retained for 30 days.
Backups: retained for up to 90 days, then automatically purged.

6. Third Parties

We do not sell or share personal data with third parties. We use self-hosted tools for analytics, error tracking, and monitoring. External services used:

Cloudflare — DNS, DDoS protection, CDN (data processing per their privacy policy)
Hetzner Cloud — infrastructure hosting (EU, GDPR-compliant)

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

Access your personal data
Rectify inaccurate data
Request deletion of your data
Export your data in a machine-readable format
Object to or restrict processing

To exercise these rights, email privacy@mark-42.co. We respond within 30 days.

8. Cookies

We use only essential cookies (session management, language preference). No advertising or tracking cookies are used.

9. Changes

We may update this policy. Material changes will be communicated via email or in-app notification. Continued use after changes constitutes acceptance.