Privacy Policy

1. Controller

The controller for data processing described here is Codeum UG (haftungsbeschränkt), Barthshof 5, 86150 Augsburg, Germany. Contact: support@routellers.com.

2. What we collect

We keep data collection to what the service actually needs:

• Email address — to deliver purchased content and link it to your account in the app (contract performance, Art. 6 (1)(b) GDPR).
• Purchase records — what was bought, when, for how much, including VAT breakdown (contract and legal obligations, Art. 6 (1)(b), (c) GDPR).
• Consent records — the fact and time you agreed to these documents at checkout (legal obligation, Art. 6 (1)(c) GDPR).
• Partner attribution — a random token in a cookie when you arrive via a partner QR code or enter a partner code, so the discount reaches you and the partner is credited (legitimate interest, Art. 6 (1)(f) GDPR).
• Technical logs — IP address and request data kept briefly for security and troubleshooting (legitimate interest, Art. 6 (1)(f) GDPR).

3. Payments

Web payments are processed by Stripe Payments Europe, Ltd.; your card details go to Stripe directly and never touch our servers. In-app purchases are processed by Apple; we receive a transaction confirmation, not your payment details. Both act as independent controllers for the payment itself.

4. Emails

We send transactional emails: your access link, purchase confirmation, and — if you asked us to save a partner discount — up to two reminders before it expires. We do not send marketing newsletters without a separate opt-in.

5. Cookies

The site uses one functional cookie: "rt_ref", which stores a random partner-discount token for up to 90 days. It contains no personal data by itself. We do not use advertising cookies on the site.

6. Sharing

We share data only with processors needed to run the service (hosting, email delivery, payment processing) under data processing agreements. Partners whose discount you used see aggregated statistics, never your identity.

7. Retention

Purchase and invoice data is kept for the statutory retention periods (up to 10 years under German tax law). Consent records are kept as long as the underlying purchase records. Attribution tokens expire after 90 days.

8. Your rights

You have the right to access, rectify, erase and port your data, to restrict or object to processing, and to withdraw consent at any time with future effect. Write to support@routellers.com. You may also complain to a supervisory authority; for us that is the Bavarian Data Protection Authority (BayLDA), Ansbach.