Privacy Policy

The short version

We use your release-list details to tell you about new modules and your purchase details to provide your course. We count visits without cookies. Optional Google Ads conversion measurement runs only after you expressly accept advertising measurement. We do not sell your data, use remarketing, build advertising profiles or enable enhanced conversions. You can withdraw optional measurement consent through Privacy settings in the footer.

1. Who is responsible

Jan Decher – Azubi-Hilfe Online Lernhilfen & Kurse, Berliner Straße 3, 35315 Homberg (Ohm), Germany. Email: info@passthecalc.com. We are based in Germany, so the EU General Data Protection Regulation (GDPR) applies to everything we do, including for visitors from the United States. We apply the rights described below to every person, regardless of country or state.

2. What we collect and why

Launch-list form

What: your email address, your state, the course you are interested in, whether you are retaking the exam, your preferred language and, only if you tick the team box, a company or program name and a team size. We also store the date and time you agreed and the version of this policy you agreed to.

Why: to email you about new Pass the Calc modules.

Legal basis: your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time with effect for the future.

When you buy

What: your email address, the course you buy, the amount, the time of purchase, your consent at checkout, the payment status and the country of your billing address (to check that you are buying from the United States). Card details and the rest of your billing data are entered on the payment provider’s page and never reach our servers. To give you access we store a one-way hash of your personal access key and set one strictly necessary cookie that keeps you signed in to your course.

Why: to complete the purchase, give you access and keep the records the law requires.

Legal basis: performance of a contract (Art. 6 (1) (b) GDPR) and legal obligations for bookkeeping (Art. 6 (1) (c) GDPR).

Visiting the website

What: when your browser loads this site, our hosting provider technically processes your IP address, the time of the request, the page requested and basic browser information.

Why: to deliver the page to you and to keep the site secure and stable.

Legal basis: our legitimate interest in running a secure website (Art. 6 (1) (f) GDPR). We do not use this data to identify you or to follow you across visits.

Emails you send us

What: your email address and whatever you write to us.

Why: to answer you.

Legal basis: steps prior to a contract or our legitimate interest in answering enquiries (Art. 6 (1) (b) and (f) GDPR).

3. What we never do

We do not sell personal data or use cross-context behavioral advertising, remarketing, enhanced conversions, session recording or fingerprinting. We never send email addresses, names, payment session identifiers, course-access keys or tokens to Google. We do not buy or rent data about you, make automated decisions about you or build profiles. Please do not send sensitive data such as health information or government ID numbers.

4. Cookies, local storage and visitor statistics

The course cookie is strictly necessary and holds your personal access key. Privacy choices are stored locally, separately for analytics and advertising. Our hosting statistics count page visits, time on page, page load speed and technical errors without cookies or identifying returning visitors; clicks and app events wait for analytics consent. Visits also record the referring site, country, browser, operating system and device type. IP addresses are not retained. Detailed records last 90 days and daily summaries one year. Legal basis for essential cookieless statistics: our legitimate interest (Art. 6 (1) (f) GDPR); optional interactions: consent (Art. 6 (1) (a) GDPR).

Optional Google Ads purchase measurement

Google’s tag (AW-18570846858) loads only after explicit advertising consent, everywhere. Before that, no Google tag request is made. Personalization stays disabled. If you accept, Google may set first-party advertising measurement cookies to associate an ad click with a purchase. Only a backend-confirmed paid order in live mode is eligible for purchase conversion measurement: the actual charged amount in USD and a non-secret order transaction identifier are sent. Advertising consent must have been recorded with the order and still be granted when reporting. The tag receives a sanitized page address and no sensitive query strings or referring URL. Google processes connection information such as your IP address and browser when its tag loads.

With analytics consent we retain the allowlisted campaign fields utm_source, utm_medium, utm_campaign, utm_content and utm_term. With advertising consent we also retain the Google click identifier (gclid). These fields are kept temporarily in tab storage and attached to your order or release-list signup with the purpose choices, date, time and notice version. They do not replace purchase or email consent. No advertising identifiers are added to Stripe metadata. Legal basis: consent (Art. 6 (1) (a) GDPR). Accept and Reject are equally available; separate choices can be changed in footer Privacy settings. Withdrawal clears local attribution for refused purposes and stops future reporting; it cannot undo data already sent. Global Privacy Control and Do Not Track block Google measurement. See Google’s privacy information.

5. Who processes data for us

We use carefully selected service providers who process data only on our instructions: a website building and hosting platform (Lovable) and a managed database service (Supabase) in which the launch list is stored. Payments are processed by Stripe, which acts as its own controller for the payment data it collects. Lovable’s managed email delivery service sends app emails, including internal order notifications containing purchase details. We give no one else access to the list.

For optional advertising conversion measurement, the recipient is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may process measurement data in the United States under the transfer safeguards described below. Contact and course-access information is never supplied to Google.

6. Transfers outside the EU

Our providers may process data on servers in the European Union and in the United States. Where data leaves the European Economic Area, the transfer is safeguarded by an adequacy decision (such as the EU-US Data Privacy Framework for certified providers) or by the European Commission’s Standard Contractual Clauses.

7. How long we keep it

Launch list: until you unsubscribe or ask us to delete it, and in any case no longer than 24 months after you signed up, unless you have become a customer by then.

Proof of consent: if you withdraw consent, we keep the minimal record that you once consented (email address, time, policy version) for up to three years so that we can demonstrate lawful processing, and for nothing else.

Orders and invoices: ten years, as German tax and commercial law requires.

Optional attribution: tab storage lasts until the tab session ends or the relevant consent is withdrawn. Consent answers last up to 365 days for acceptance and 183 days before a refusal is asked again; an old refusal does not enable tracking. An order’s attribution follows its order retention period and a signup’s attribution follows its release-list retention period; you can request deletion of optional attribution separately from legally required purchase records. A local non-secret transaction identifier prevents repeat purchase reporting on reload. Google’s measurement retention is governed by its linked privacy information.

Emails you send us: up to 12 months after your enquiry is resolved, unless the law requires longer.

8. Your rights

You have the right to know what we hold about you and to receive a copy, to have it corrected, to have it deleted, to restrict or object to its use, to receive it in a portable format and to withdraw your consent at any time. We give these rights to everyone, not only to residents of places where the law requires it. Using them costs nothing and never leads to worse treatment. Write to info@passthecalc.com from the address you signed up with; we need no ID documents. We answer within 30 days and usually much faster.

You also have the right to complain to a data protection authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Wiesbaden, Germany. Residents of the United States may also contact their state attorney general.

9. Notice for residents of US states with privacy laws

Categories we collect: identifiers (email address), professional information you choose to give (exam, attempt status, company or program name, team size), approximate location (state) and internet activity that is technically necessary to serve and measure the site (IP address during delivery, request data, pages viewed, clicks, browser, operating system, device type). Sources: you and your browser. Purposes: those described in section 2. We do not sell personal information, do not share it for cross-context behavioral advertising and have not done so in the past 12 months. We do not collect sensitive personal information. You may exercise the rights in section 8 yourself or through an authorized agent, and you may appeal a decision by replying to our answer; we respond to appeals within 45 days.

10. Emails from us

If you join the list, we send you emails about new Pass the Calc modules only. Every email contains an unsubscribe link and our postal address. Unsubscribing takes effect immediately.

11. Children

This website is intended for working adults. We do not knowingly collect data from anyone under 18. If you believe a minor has signed up, tell us and we will delete the entry.

12. Security

The site is delivered over an encrypted connection. The launch list can be written to by the form but cannot be read from the public internet; only the operator has access. If a breach affecting your data should ever occur, we will inform the authority and the people affected without undue delay.

13. Changes to this policy

The version and date at the top show which version you are reading. If we make a material change, we will email everyone on the list before it takes effect and never apply a weaker policy to data collected under a stronger one without asking again.

14. Contact

Questions about privacy: info@passthecalc.com