Privacy

Version 2026-11-01. No advertising, no ad tracking, and no tracking cookies.

Who is responsible

Klaus Breyer, as named in the imprint.

What I process

Your email address, your photos with their file data (date, place, camera), your album texts, and your IP address in server logs. I need this data to run the service you asked for (Art. 6 (1) b GDPR).

Where your data goes

Bunny.net stores your original photos, previews, and PDF files in Germany, and runs the service. Its servers keep the logs.

The Postgres database runs at Hetzner in Germany. It holds album titles, texts, photo details, and your email address.

Resend gets your email address to send you the link, the password, and other emails about your album.

OpenRouter and the AI model behind it get small previews, dates, and places to suggest pages and cover colors. They can process data outside the EU.

OpenStreetMap gets the place of one photo and your IP address, but only after you click Show map.

Product analytics

I use PostHog to learn how the product is used: which steps people take, where they get stuck, and which features nobody touches. This is the only way I can improve clickclickbook, so I ask for your understanding. The legal basis is my legitimate interest in improving the product (Art. 6 (1) f GDPR).

It runs without cookies. PostHog gets anonymous events such as "uploaded photos" or "downloaded PDF", your browser type, and your IP address, which it uses to estimate a rough location. It does not get your photos, your texts, or your email address. No profile is built about you, and nothing is shared with advertisers.

Cookies

Only the ones the service needs. One cookie remembers that you entered an album password. One remembers whether the map is open. There are no tracking cookies, so there is no cookie banner.

How long data stays

I delete all data of an album 7 days after its end date or its deletion.

Your rights

You can ask for access, correction, deletion, and a copy of your data. You can object to processing and complain to a data protection authority. Write to kb@v01.io.