Cryptomator

"For the payment process, the user may be redirected to the website of the payment service provider or data from websites of these service providers may be reloaded. This may depend on the payment method chosen by the user: PayPal, Stripe, CoinPayments, Paddle. Disclosed data includes name and email address, order number, date and amount, credit card details for processing of the payment and assignment of the payment to the customer."

Personal and financial data including name, email, and credit card details are shared with four different payment processors (PayPal, Stripe, CoinPayments, Paddle), each with their own privacy policies that users must separately review.

"For internal audience measurement, we use a privacy-preserving, self-hosted analytics service that uses cross-page user recognition technology to analyze behavior. We collect various information (e.g., shortened IP address, referrer URL, browser and operating system used) and measure certain visitor actions (e.g., clicks, purchases, etc.)."

The analytics service explicitly uses cross-page user recognition technology to track users across different pages, building a behavioral profile from clicks, purchases, and browsing patterns, even though no cookies are stored.

"Data is retained as long as necessary to fulfill the purpose for which it was collected or to comply with legal requirements. Data will be deleted if the GDPR right to erasure is exercised, unless legal obligations or legitimate interests require further retention. Retaining certain data allows our support and sales teams to provide better service by drawing on insights gained from past interactions."

Customer relationship data including communication history, inquiry content, and interaction notes are retained indefinitely to improve future service, with deletion only occurring if the user actively exercises their GDPR erasure right.