Privacy Policy

We collect as little as we can to run P-urpose. We don’t sell data, we don’t run advertising trackers, and we don’t use cookies for marketing.

Who is responsible

Ichii GmbH, Kollwitzstraße 76, 10435 Berlin, Germany (“we”). Managing director: Kunichi Kisaki. Contact: info@ichii.de.

What we process and why

• Without an account: the class you’re editing is stored only in your browser (local storage). A small signed cookie counts how many classes you’ve generated this month. To keep the free limit fair, we also count generations per network using a keyed, one-way hash of your IP address that changes every month — we never store the IP address itself, and counts are deleted after the month ends. Legal basis: Art. 6(1)(b) and (f) GDPR (providing the service, preventing abuse).
• Account: your email address and sign-in data, and the classes you save. Sign-in codes and links are sent to your email address; we don’t send marketing emails. Legal basis: Art. 6(1)(b) GDPR (contract).
• Subscription: payments are processed by Stripe. We store your Stripe customer ID and subscription status — never your card details. Legal basis: Art. 6(1)(b) and (c) GDPR (contract, tax records).
• Usage statistics: privacy-friendly, cookieless page and product analytics (Vercel Web Analytics) that don’t identify you or track you across sites. Legal basis: Art. 6(1)(f) GDPR (improving the product).
• Google Analytics 4 (only with your consent): if you click “Allow” in the analytics notice, we use Google Analytics 4 to understand how P-urpose is used (pages viewed, approximate location at country/city level, device and browser type, referrer, a pseudonymous browser ID). GA4 stores cookies (_ga, _ga_2JCNHLYZJD) for up to 13 months. We have switched off Google signals and ad personalisation, and we do not use GA for advertising. Nothing from Google is loaded unless you agree. Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw it any time via “Cookie settings” in the footer; we then stop GA and delete its cookies.
• Server logs: technical logs (e.g. IP address, time, requested page) kept briefly for security and troubleshooting. Legal basis: Art. 6(1)(f) GDPR.

Cookies

Strictly necessary cookies keep you signed in, remember your language and enforce the free monthly limit; they need no consent. Google Analytics cookies are only set after you click “Allow”. Your choice is stored in your browser and can be changed at any time under “Cookie settings”.

Service providers

• Vercel Inc. — hosting and cookieless analytics.
• Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland) — Google Analytics 4, only with your consent. Data may be processed by Google LLC in the USA.
• Supabase Inc. — database and authentication, hosted in the EU (Frankfurt).
• Stripe Payments Europe Ltd. — payments and invoicing.
• Resend (Plus Five Five, Inc.) — delivery of sign-in emails from hello@p-urpose.com.

Where providers process data outside the EU/EEA, transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses. We have data processing agreements with each provider.

How long we keep data

Account data and saved classes are kept until you delete your account (Account → Delete account), which removes them immediately. Payment records are kept as long as tax law requires (up to 10 years in Germany).

Your rights

You can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interests. Email us at info@ichii.de. You also have the right to complain to a data protection supervisory authority.