Privacy

Controller

Max Lange
Elisabethstraße 69
80797 Munich
Germany
support@aries.sh

Website analytics

The websites and licence server are hosted by Uberspace in Germany. Necessary connection logs (such as IP address, time, requested URL, browser identifier and status) are processed to operate and secure the service under Art. 6(1)(f) GDPR and are normally deleted after 14 days.

Early Access analytics starts only with consent under Art. 6(1)(a) GDPR and section 25(1) TDDDG. Before tracking, only your decision, wording version and timestamp are stored locally. After consent, a random session ID, page and product interactions, UTM campaign values and only the referring domain are sent to our own server. Raw analytics are deleted after 90 days. Consent can be changed through “Privacy settings” in the footer.

Trial, licensing and downloads

We process the email, licence and expiry state, product/edition and order references, payment/tax evidence, pseudonymous activation/device identifiers, operating system and architecture, and activation or revocation dates as needed to provide, support and secure Aries (Art. 6(1)(b), (c) and (f) GDPR). Aries licensing does not collect device names, app-version history, last-online times or product-usage history. Expired trial activation/device records are deleted after 90 days. Operational licence/contract records are retained while the entitlement exists and generally for three years afterwards. Accounting and tax documents are retained for eight or, where applicable, ten years. Downloads are served through Cloudflare R2, which receives necessary connection data.

Newsletter and service email

You request the newsletter either by expressly submitting the dedicated form on aries.sh or by selecting the trial form’s unchecked, optional news box. We record the email, request and confirmation time, source, status and applicable notice versions. Product news is sent only after explicit double opt-in under Art. 6(1)(a) GDPR.

The public website initially sends the address only to the Aries licence server. A contact is sent to UK provider EmailOctopus only after explicit confirmation. EmailOctopus stores contact lists with AWS in Ireland and uses SendGrid or SparkPost when sending. If open or click measurement is enabled for an EmailOctopus campaign, those providers can process event data and the recipient IP address; this is therefore covered by the newsletter consent.

Licence, trial and Discord messages are transactional and are delivered through US provider Porkbun LLC under Art. 6(1)(b) GDPR. Routine messages are not automatically copied to a second support address. Marketing consent can be withdrawn through the email link or support@aries.sh. Consent evidence is retained for three years after withdrawal. A non-reversible suppression digest remains only while necessary to honour the objection in marketing systems actually in use, with necessity reviewed at least annually.

Purchases, payments and Discord

Checkout is provided by Payhip Limited. Under Payhip’s end-user terms, Payhip is the contracting party for the digital content and processes order, contact, tax and payment data as an independent controller. Stripe or PayPal is involved depending on payment choice. Aries receives the order information required for licensing, support, accounting and fraud prevention. Legacy provider identifiers from previous Gumroad or FastSpring orders may remain in existing records.

Discord access is optional. We process the email mapping, Discord user ID, invitation/connection state, role entitlement and timestamps to provide licensed community access. Unused invitations are deleted 30 days after expiry and connected identities 30 days after entitlement ends.

Recipients, transfers and retention

Uberspace hosts the websites and licence service in Germany. Cloudflare, Inc. serves downloads through its global R2 network; its data-processing terms include EU Standard Contractual Clauses and EU-US Data Privacy Framework provisions. US mail provider Porkbun LLC identifies Standard Contractual Clauses as a safeguard for international transfers.

Payhip Limited and EmailOctopus Limited are in the United Kingdom, which is covered by the renewed EU adequacy decision of 19 December 2025. They may use providers outside the UK or EEA; EmailOctopus specifically names AWS Ireland, SendGrid and SparkPost. Stripe generally contracts through Irish entities for EEA customers and includes EU Standard Contractual Clauses for necessary onward transfers. PayPal Europe in Luxembourg relies on approved Binding Corporate Rules for intra-group transfers and other appropriate safeguards. US-based Discord identifies Standard Contractual Clauses, adequacy decisions and the EU-US Data Privacy Framework. These providers act partly as independent controllers for checkout, payment or platform use. You may request copies of safeguards available to Aries at support@aries.sh.

Local campaign/admin metadata is normally retained 12 months, operational backups 35 days and support correspondence three years after closure. Legal holds and statutory retention duties may require longer storage.

Your rights

Subject to the GDPR, you may request access, correction, erasure, restriction or portability, object to processing and withdraw consent for the future. Contact support@aries.sh. To prevent disclosure to another person, identity is normally verified through the email already on record and, where needed, an order reference. Access, correction and erasure are coordinated across the Aries licence database and EmailOctopus where configured; for independent controllers we help identify the responsible provider. Required legal records, active legal holds and a necessary minimal suppression digest may remain after erasure. Deleted data may persist until routine overwrite in access-restricted backups and is not restored into active operation.

You may complain to the Bavarian State Office for Data Protection Supervision. Aries does not make solely automated decisions with legal or similarly significant effects; automated licence checks only control technical access according to the recorded entitlement.