Privacy

Controller: jakoby.design, Jakob Winterholler, address see Imprint.

What we process

• Hosting (Cloudflare): IP address, time, page and browser in server logs (Art. 6(1)(f) GDPR, operation and security). Cloudflare acts as processor under EU standard contractual clauses.
• Purchase (Stripe): Payment runs through Stripe, which processes payment data as its own controller; we receive email, amount, product and a transaction ID (Art. 6(1)(b) GDPR). We never store card data.
• Access: We store your email, purchased mountains and purchase date to grant access (Art. 6(1)(b) GDPR). Access links are sent via Resend (email service, EU standard contractual clauses).
• Browser storage: Your chosen route, tour date and ticked packing list are stored only in your browser (localStorage). This data never leaves your device; you can delete it in your browser settings at any time.
• Fonts, 3D map: Fonts, terrain and map data are served from our own server. Nothing is loaded from Google or other third parties.
• Email contact: If you write to us, we process your message and email address to reply (Art. 6(1)(b) or (f) GDPR).
• Cookie: After login we set one strictly necessary cookie ("as_session", 90 days). No tracking cookies, no analytics.

Retention

Purchase data is kept while your access exists and as long as statutory retention (10 years for invoices) requires. Access links expire after 15 minutes.

Your rights

Access, rectification, erasure, restriction, portability, objection and complaint to a supervisory authority. Write to hallo@alpin.studio.

As of October 2026.