Privacy Policy

This Privacy Policy explains how Danpicbook (CVR 46626702), Denmark, operating the website DanPicBook (danpicbook.com), collects and processes your personal data. We are the data controller. Questions? Email danpicbook@gmail.com.

1. What we collect

• Account & sign-in: your email address (used for passwordless one-time-code login) and, if provided, your name.
• Purchases: which products you bought, the amount, and the status of the transaction. We do not store your card or bank details — payments are handled entirely by our payment providers (see §3).
• Mailing list (optional): if you sign up for free papers or exam updates, your email and which lists you chose.
• Usage data: anonymous, aggregated analytics about which pages are visited (via Vercel Analytics). See our Cookie Policy.

2. Why we use it (legal basis)

• To give you access to the content you purchased or unlocked — performance of a contract.
• To send the login code and purchase confirmations — performance of a contract.
• To send exam updates / free papers you asked for — your consent, which you can withdraw at any time via the unsubscribe link.
• To keep the site secure and understand usage — our legitimate interest in running and improving the service.

3. Who we share it with (processors)

We only share data with the service providers needed to run the site, each acting on our instructions:

• Vercel — website hosting and anonymous analytics.
• Neon — database hosting for accounts and purchases.
• Resend — sending login codes and confirmation emails.
• Mollie — card / MobilePay payment processing.
• Cloudflare R2 — storage/delivery of audio, video, and downloads.

Where you pay by WeChat, the transaction is completed manually and no card data reaches us. We never sell your data.

4. How long we keep it

Purchase records are kept as long as your account exists so you keep access to what you bought (and as required by accounting law). Mailing-list data is kept until you unsubscribe. You can ask us to delete your account and data at any time (see §6).

5. International transfers

Some processors above may process data outside the EU/EEA. Where they do, the transfer is covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

6. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• have your data deleted;
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent at any time.

To exercise any of these, email danpicbook@gmail.com. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).

7. Changes

We may update this policy. The "last updated" date at the top always reflects the current version.