Privacy Policy (GDPR + CPRA)

This Privacy Policy explains how we (TextureMap.app, operated by Bengi Kirici) collect, use, and protect your personal data when you use our website and services.

1. Controller

TextureMap.app is operated by Bengi Kirici — 3D Artist · Designer · Architect
Stralauer Platz 37, 10243 Berlin, Germany
Email: info@texturemap.app
VAT Identification Number (USt-IdNr.): DE449599870

2. Data We Process

  • Uploaded images: Processed locally in your browser. They never leave your device.
  • Newsletter subscriptions: Email address stored securely in Supabase (EU region) with double opt-in.
  • Contact form: Name, email, and message, processed to respond to your request.
  • Usage data: IP address, browser info, and analytics data, only if you consent to non-essential cookies.

3. Purposes and Legal Bases

  • Service provision (GDPR Art. 6(1)(b)): Operating texture map tools and ensuring site functionality.
  • Legitimate interest (Art. 6(1)(f)): Security, fraud prevention, and ensuring technical stability.
  • Consent (Art. 6(1)(a)): Newsletter subscription and analytics cookies.
  • Legal obligations (Art. 6(1)(c)): Compliance with tax and commercial laws.

4. Cookies and Tracking

By default, we use only essential cookies. Analytics and marketing cookies are set only if you give consent via our cookie banner.

Non-essential scripts (including Google Analytics) are blocked until you provide consent.

Legal basis: GDPR Art. 6(1)(a), TTDSG §25. You can withdraw consent at any time in the Cookie Settings.

5. Data Recipients and Processors

  • Hosting: Vercel (Germany/EU region)
  • Database: Supabase (EU region)
  • Email delivery: Resend / Brevo (newsletter + contact forms)
  • Analytics: Google Analytics (US-based). Data may be transferred to the United States under Standard Contractual Clauses (SCCs). Analytics runs only after your consent via the cookie banner. IP anonymization is enabled (anonymize_ip = true). You can withdraw consent anytime in Cookie Settings.

We have Data Processing Agreements (DPAs) in place with all third-party providers as required by GDPR Art. 28.

6. Retention Periods

  • Newsletter emails: Until you unsubscribe or withdraw consent.
  • Contact form data: Deleted after handling your request, unless legal retention periods apply.
  • Analytics data: Retained only as long as necessary for statistics, then deleted or anonymized.

7. Your Rights under GDPR

You have the following rights: access, rectification, erasure, restriction, portability, and objection. To exercise your rights, contact info@texturemap.app.

You also have the right to lodge a complaint with the supervisory authority: Berliner Beauftragte für Datenschutz.

8. International Transfers

If providers outside the EU/EEA are used, we rely on Standard Contractual Clauses (SCCs) and supplementary measures to protect your data.

9. California Residents (CPRA)

Under the California Consumer Privacy Act (CCPA/CPRA), you have the right to know, access, correct, delete, and opt-out of the sale or sharing of personal information. We do not sell personal data.

You can exercise these rights by emailing info@texturemap.app or visiting our Do Not Sell/Share My Personal Information page.

10. Changes to this Policy

We may update this Privacy Policy from time to time. The last update was on 8/3/2026.