Privacy Policy

1. Who is responsible

The controller responsible for processing your personal data on adarchetypes.com (the "Website") under the EU General Data Protection Regulation (GDPR) is:

We have not appointed a data protection officer, because we are not legally required to. For any privacy question or request, email anton@adarchetypes.com.

2. Overview

We process personal data only as far as needed to run the Website, sell and deliver the Ad Archetype Library and the Hook Library, answer enquiries, measure visits and our ads under the regional choices described below, and send emails with your consent.

We do not sell your data, and we do not use it for automated decision-making or profiling with legal or similarly significant effects.

3. Visiting the Website

Hosting and server logs. The Website is built and hosted with Lovable (Lovable Labs Incorporated AB, Sweden), and our database, login system and file storage run on Supabase (Supabase, Inc., USA). When you open the Website, their servers automatically process technical data: your IP address, date and time of access, the page requested, the referring page, browser type and version, and operating system. This is necessary to deliver the Website and protect it against attacks. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Server logs are deleted automatically by our providers after a short period, usually within 30 days.

Videos. Most videos in the library are stored with our own website files. The workflow video is embedded from Loom (Loom, Inc., an Atlassian company, USA). When a page with a Loom video loads, your browser connects to Loom's servers, which receive your IP address, browser data and the page you are on, and Loom may set cookies or similar storage. Legal basis: our legitimate interest in showing these videos (Art. 6(1)(f) GDPR) and, for storage on your device, §25(2) No. 2 TDDDG. More information: Atlassian Privacy Policy.

4. Cookies, Google Analytics and Meta Pixel

Regional choices. For visitors in the US and Canada, ordinary Meta advertising measurement is enabled by default without a consent banner, unless you have refused marketing or your browser sends Global Privacy Control. European visitors, all other locations and unresolved locations see a consent banner and Meta tracking stays off until marketing is accepted. Google Analytics still requires analytics acceptance everywhere. Location is estimated from your connection's country; an unsuccessful lookup never enables default tracking. You can opt out, change or withdraw your choice at any time via "Cookie settings" in the footer of every page. Withdrawing consent does not affect processing that took place before.

Strictly necessary cookies. We use cookies and similar storage that the Website cannot work without: your login session in the library and your cookie choices. They do not require consent (§25(2) No. 2 TDDDG). You stay logged in until you log out or your session expires.

Google Analytics 4 (only with your consent). If you accept analytics cookies, we use Google Analytics 4 from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, to understand how visitors use the Website. Google sets cookies (such as _ga) and receives information about the pages you view, your device and browser, and a shortened IP address. Google may transfer data to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR, §25(1) TDDDG). More information: Google Privacy Policy.

Meta Pixel. When advertising is allowed under the regional choices above, we use the Meta Pixel from Meta Platforms Ireland Ltd., Merritt Square, Dublin 2, Ireland. The Pixel sets cookies (such as _fbp) and sends Meta information about your visit: pages you view, starting a main-library checkout from the homepage (the standard InitiateCheckout event), confirmed library purchases and their value and currency, your IP address, browser data and cookie identifiers. A separate later Hook Library checkout does not send InitiateCheckout or Purchase. If you are logged in to Facebook or Instagram, Meta can link this to your account. We use it to measure how our ads perform and to show our ads to relevant people, for example people who visited the Website. Explicit marketing refusals and applicable opt-outs stop tracking everywhere. In consent-gated locations, no acceptance means the Pixel is not loaded and nothing is sent to Meta. Meta still counts ad clicks and impressions on its own platforms regardless of this Website's choice.

Meta Conversions API. If advertising was permitted before starting checkout and remains permitted when reporting, we also report a library purchase to Meta directly from our server once payment is confirmed. This includes the purchase value and currency, your IP address, browser data and Meta's cookie IDs. For this, your cookie choice and these browser details are stored with your order at Stripe. A hashed (SHA-256) email address is added only if you explicitly accepted advertising, never merely because your country allows default measurement. Hashing does not make data anonymous. Browser and server reports share an order event ID to prevent counting the same purchase twice. This makes measurement more reliable for permitted events when browsers block the Pixel; it does not bypass refusal or required consent.

Choice evidence and withdrawal. We retain a random visitor reference, the country used for the decision, your analytics and advertising choices, applicable opt-outs, the date and time, and a versioned record of the data, recipients, purposes and choices shown. Each order references its advertising decision. Later withdrawal is recorded without erasing earlier acceptance evidence and is checked before server reporting. Cookie settings applies a refusal immediately and updates other open tabs. Events blocked at the time do not become eligible merely because you later accept.

• Where consent is required, legal basis: your consent (Art. 6(1)(a) GDPR, §25(1) TDDDG). Default US/Canada measurement remains subject to applicable privacy law and your opt-out rights; this setting is not a claim that all advertising uses are exempt from consent. Contact anton@adarchetypes.com for privacy requests.
• For collecting and transmitting data to Meta, we and Meta are joint controllers (Art. 26 GDPR) under Meta's Controller Addendum. Meta is responsible for all further processing. You can exercise your rights against either of us.
• Meta may transfer data to Meta Platforms, Inc. in the USA. Meta is certified under the EU-US Data Privacy Framework.
• More information: Meta Privacy Policy. You can manage ad preferences in your Facebook or Instagram settings.

5. Purchases

Stripe as merchant of record. Purchases are processed by Stripe through Stripe Managed Payments. Stripe sells the Products to you as reseller and merchant of record and handles payment, invoicing, taxes, fraud checks, refunds and disputes. For this, Stripe collects your name, email address, billing address, payment details and, if you provide it, your VAT ID. Stripe processes this data as an independent controller under its own Privacy Policy. We never see your full card details.

What we receive. After payment, Stripe passes us your email address, the products you bought, the amount, your country, and the order, invoice and session IDs. We use this to create your account, give you access, keep purchase records and handle questions about your order. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and our legal record-keeping obligations (Art. 6(1)(c) GDPR).

6. Your account and login

Your account consists of your email address, the products you own and the dates you bought them. It is created automatically after your purchase, and you are logged in during a short payment-verification redirect into the library. Later, you log in with a one-time link sent to your email address; we do not use passwords. Login emails are sent through our authentication provider (Supabase). Your account data is stored on Supabase servers. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

7. Emails, support and team setup enquiries

Emails with you. When you email us, for example about support, refunds or a content takedown request, we process your email address, name and the content of your message to answer you. We use Microsoft 365 (Microsoft Ireland Operations Ltd.) for our mailbox. Legal basis: performance of the contract or our legitimate interest in answering requests (Art. 6(1)(b) and (f) GDPR).

Team setup enquiries. Logged-in customers can ask us to set up the workflow for their team using the form on the workflow page. We store your name, email address, website, monthly Meta ad spend, role and team size together with your account, and send ourselves an email notification about the new enquiry. Only we can read these enquiries. We use them only to reply to you and discuss the service. Legal basis: steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR).

8. Newsletter

New purchases do not currently add buyers to our email list. We have removed the signup offer from the payment return and deferred automatic buyer enrollment. Existing newsletter subscribers may receive emails about the library and related products under their prior consent (Art. 6(1)(a) GDPR). A purchase alone never subscribes you, and existing unsubscribes remain inactive.

• Choice record: we retain existing newsletter signup evidence and unsubscribe records. Newsletter choices are separate from advertising choices in Cookie settings.
• Provider: we send the newsletter with MailerLite (UAB "MailerLite", Vilnius, Lithuania), which processes your data on our behalf under a data processing agreement. We store your email address, the sign-up date and the list you joined.
• Opens and clicks: MailerLite may record whether you open our emails and which links you click. We use this only to improve our emails.
• Unsubscribe: every email contains an unsubscribe link, or email anton@adarchetypes.com. We then stop sending newsletters and delete your newsletter data, except for a record that you unsubscribed so we don't email you again.

More information: MailerLite Privacy Policy.

9. Service providers and transfers outside the EU

We share personal data only with the providers below, and only as far as needed for the purposes described above.

Processors act only on our instructions under data processing agreements (Art. 28 GDPR).

Some providers process data in the USA. Transfers take place on the basis of the EU-US Data Privacy Framework where the provider is certified, or under the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

10. How long we keep your data

You can ask us to delete your account at any time by emailing anton@adarchetypes.com. Records we are legally required to keep are then restricted to that purpose until the retention period ends.

11. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you (Art. 15)
• Correct inaccurate data (Art. 16)
• Delete your data (Art. 17)
• Restrict processing (Art. 18)
• Receive your data in a portable format (Art. 20)
• Withdraw consent at any time with effect for the future (Art. 7(3)), for example via "Cookie settings" or the unsubscribe link

Right to object (Art. 21). Where we process your data based on legitimate interests, you can object at any time for reasons arising from your particular situation. You can object to the use of your data for direct marketing at any time, without giving reasons.

To use any of these rights, email anton@adarchetypes.com. We reply within one month.

12. Complaints

You can complain to a data protection supervisory authority, in particular in the EU country where you live or work. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), www.datenschutz-berlin.de.

13. Other information

Children. The Website is aimed at professionals and is not directed at children under 16.

Security. The Website uses encrypted connections (HTTPS). Access to the library and your account data is limited to logged-in users who own the matching products.

Changes. We update this Privacy Policy when our services or the law change. The current version is always available on the Website.