This privacy policy is provided primarily in German, as required by German law. Below is a brief English summary.
Controller: Madeleine Rathje, Am Schützenholz 22, 29643 Neuenkirchen, Germany · info@scary-cards.com
We process personal data (name, address, email, order data) solely for contract processing (Art. 6(1)(b) GDPR). Payment data is processed by Stripe and PayPal. Server hosting is provided by Hetzner/netcup (Germany/EU). We do not share your data with third parties except as required for order fulfilment and payment processing. You have the right to access, rectification, erasure, restriction, portability, and to lodge a complaint with a supervisory authority. For full details, please switch to the German version.
Visitor statistics without cookies: We count page views and items added to the cart without cookies and without storing anything on your device. A shortened checksum is formed from your IP address, browser identifier and a random value that changes daily; the IP address itself is not stored, and the daily value is deleted at the end of the day, after which the checksum can no longer be linked to anyone. Legal basis: Art. 6(1)(f) GDPR. Data is deleted after 13 months. We do not count browsers with "Do Not Track" or "Global Privacy Control" enabled.
As of: September 2026