Privacy policy

This policy explains which personal data is processed when you visit www.stillmeasure.com, write to us or use our planners – for what purpose, on what legal basis, and what rights you have. It follows the EU General Data Protection Regulation (GDPR). A German version is available at Datenschutzerklärung.

The short version

• This website uses no cookies and no tracking: no analytics or advertising scripts, no pixels, no social media plugins, no embedded videos or maps.
• Fonts, images, videos and scripts come from our own server. Opening a page doesn't connect you to Google or any other third party.
• Our host, Cloudflare, processes technical access data such as your IP address when you open a page.
• If you write to us by email or through the contact form, we use your details to answer you.
• Our web apps save your entries only in the browser on your device. Nothing is sent to us.
• Purchases happen on Etsy, where Etsy's privacy policy applies.

1. Controller

The controller responsible for data processing (Art. 4(7) GDPR) is:

Tobias Marks
MarksFinanceGroup (sole proprietorship), brand stillmeasure.
Sponheimer Str. 14
55595 Mandel
Germany
Email: contact@stillmeasure.com

We haven't appointed a data protection officer because the law doesn't require one for us. For any privacy question, simply write to the address above.

2. Visiting the website: hosting by Cloudflare

This website is hosted on Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA ("Cloudflare"). When you open a page, your browser automatically sends technical data needed to deliver it. Cloudflare processes:

• the IP address of your device,
• the date and time of the request,
• the requested address and, if your browser sends it, the page you came from (referrer),
• information about your browser, operating system and language setting (user agent),
• technical details such as the status code and the amount of data transferred.

Purpose: delivering the website, defending against attacks and misuse (such as overload attacks) and finding technical errors. Legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a secure, stable and fast website. The connection is encrypted (HTTPS).

Cloudflare processes this data as our processor (Art. 28 GDPR). Cloudflare's Data Processing Addendum is part of our contract with Cloudflare. We don't analyze the access data of individual visitors and don't combine it with other data. For statistics we use at most aggregated page-view numbers that Cloudflare derives from this data – nothing is stored on or read from your device for this.

Storage period: Cloudflare keeps this access data only as long as it is needed to deliver the website, defend against attacks and find errors, and deletes it afterwards. We don't store any access data ourselves.

Transfers to the USA: Cloudflare runs a global network of data centers. Your request is usually answered by a data center near you, but data may also be transferred to the USA. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework. For certified companies, the European Commission has found an adequate level of data protection (adequacy decision of July 10, 2023, Art. 45 GDPR). In addition, our agreement with Cloudflare includes the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). More: Cloudflare's privacy policy and the list of certified companies.

No cookies: We don't use cookies or similar technologies – no local storage, no pixels, no recognizing your device by its characteristics. We haven't switched on Cloudflare bot protection (which can set cookies) or Cloudflare Web Analytics (which would add a measuring script).

3. Address without "www" and email: Hostinger

Our domain, its name servers and our mailbox are provided by Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus ("Hostinger"). Hostinger acts as our processor (Art. 28 GDPR) under its data processing agreement.

• Redirect: If you type the address without "www" (stillmeasure.com), a Hostinger server forwards you to www.stillmeasure.com. In doing so, Hostinger processes the same technical access data as in section 2 (IP address, time, address, browser details). Legal basis is Art. 6(1)(f) GDPR; our interest is that the website works with both spellings. Hostinger keeps this access data only as long as it is needed for the redirect and the security of its servers, and deletes it afterwards.
• Email: Hostinger receives, sends and stores emails to and from contact@stillmeasure.com for us (see section 4).

Where Hostinger transfers data to countries outside the EU, it does so on the basis of the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR), which are part of Hostinger's data processing agreement. More: Hostinger's privacy policy.

4. Email and contact form

If you write to us by email or through the contact form, we process what you tell us: your email address, your message and – if you add them – your name, the planner, the edition, and your device and browser. Please don't send order numbers in links, payment details or health information.

How the form works: When you send it, your details go over an encrypted connection to a small server function at Cloudflare (Cloudflare Pages Functions, see section 2). It checks the entries and immediately sends them as an email through Hostinger's mail server to our mailbox contact@stillmeasure.com. The function itself stores nothing. To keep out spam, the form contains a field that people don't see and a timestamp that your browser adds when the page loads. The function also uses your IP address briefly in memory to limit many messages in a short time. Your IP address is not stored and is not included in the email.

Purpose and legal basis: We use your details to handle and answer your request. If it concerns a purchase or a possible purchase, the legal basis is Art. 6(1)(b) GDPR; otherwise it is Art. 6(1)(f) GDPR (our legitimate interest in answering requests). Spam protection is based on Art. 6(1)(f) GDPR.

Retention: We delete your message and our reply once your request has been dealt with. If a message is subject to a statutory retention obligation (for example under commercial or tax law), we keep it until that period ends and use it only for that purpose.

Providing your details is voluntary, but without an email address we can't reply. If you write to us through Etsy's messaging system, Etsy's privacy policy applies to it (section 6).

5. Fonts, images and videos

The fonts Inter and Playfair Display, and all images, videos and scripts, are stored on our own server at Cloudflare. Nothing is loaded from Google Fonts, third-party content delivery networks, YouTube or social networks. You start product videos yourself with a click; they also come from our server.

6. Etsy and links to social networks

Buying on Etsy: You can only buy our products on Etsy. Etsy is itself responsible for ordering, payment, download and Etsy messages, and Etsy's privacy policy applies. As the seller, we receive the order data that Etsy makes available to us (such as your name and what you ordered). We use it to complete your purchase and to help you with questions (Art. 6(1)(b) GDPR) and keep it as long as commercial and tax law require (Art. 6(1)(c) GDPR). More details are in the privacy policy of our Etsy shop.

Links: Our buy buttons lead to Etsy, and we link to our social media profiles (for example Pinterest, TikTok and LinkedIn). These are plain links: only when you click one do you leave this website, and the provider then processes data under its own privacy policy. We don't embed plugins, buttons or content from these providers that would transfer data as soon as you open our pages.

7. Our web apps and Google Sheets templates

The planners you buy on Etsy don't need an account with us:

• Web app as an HTML file: The file runs entirely in your browser. The app saves your entries in your browser's local storage on your device. It doesn't send any data to us or to third parties and doesn't load anything from the internet. We have no access to your entries. Backups are files you download and keep yourself.
• PDF E-Sign: The app reads the PDF files you open directly from your device and edits them in your browser. They are not uploaded.
• Web app for iPhone and iPad: You'll find the link in your START HERE guide. This version is also hosted on Cloudflare Pages. When you open it, Cloudflare processes the same technical access data as described in section 2, with the same storage period – legal basis Art. 6(1)(b) GDPR (providing the product you bought) and Art. 6(1)(f) GDPR (security). So that the app also works offline, your browser keeps its program files in its cache. As with the HTML file, your entries stay only in the local storage of your device.
• Google Sheets templates: You make your own copy in your Google account. Google processes whatever you enter there under its own terms and privacy policy. We have no access to your copy.

Storing data on your device is strictly necessary for the function you want to use (§ 25(2) no. 2 of the German TDDDG). If you clear your browser data, your entries are gone – that's why we recommend regular backups.

8. Recipients and automated decisions

Personal data is only received by the service providers named above, within the scope of their contracts (Cloudflare, Hostinger). We don't sell data and don't pass it on for advertising. We only disclose data to authorities if we are legally required to.

We don't make automated individual decisions and don't create profiles (Art. 22 GDPR).

9. Your rights

You have the right to

• access the data we process about you (Art. 15 GDPR),
• rectification of incorrect data (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR).

None of the processing described here is based on consent. To exercise your rights, write to contact@stillmeasure.com.

Complaints to a supervisory authority (Art. 77 GDPR): You can lodge a complaint with any data protection supervisory authority, for example the one responsible for us:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (State Commissioner for Data Protection and Freedom of Information, Rhineland-Palatinate)
Hintere Bleiche 34, 55116 Mainz, Germany
Postal address: Postfach 30 40, 55020 Mainz, Germany
Phone: +49 6131 8920-0
Email: poststelle@datenschutz.rlp.de
Website: www.datenschutz.rlp.de

10. "Do Not Track"

We don't track visitors across websites and don't use any tracking technologies. A "Do Not Track" signal from your browser therefore changes nothing – there is nothing for us to switch off.

11. Changes

This version is effective as of October 12, 2026. We update this policy when our website, our service providers or the law change. The version published here always applies.