Privacy Policy

Who we are

unfol.de is operated by WORLDTOWN, SIRET 79070329200025, located at 34 avenue d'Anglet, Biarritz, France. You can reach us at hello@unfol.de.

Data we collect

• Account data — email address, display name, and a bcrypt-hashed password. We never store your password in plain text.
• Portfolio content — projects, categories, images, videos, and custom pages you upload.
• Analytics — page views are tracked using a privacy-first approach: we hash your IP address and user-agent with a rotating salt to count unique visitors. No cookies are set, no third-party trackers are loaded, and we cannot identify you personally from this data.
• Payment data — processed entirely by Stripe. We never see or store your card number. We retain only your Stripe customer ID and subscription status.

Legal basis

• Contract execution — your account data and content are processed to provide the service you signed up for.
• Legitimate interest — anonymized analytics help us understand usage and improve the product without compromising your privacy.

Third-party services

• Stripe — payment processing (privacy policy)
• Mailgun — transactional emails such as password resets and email verification (privacy policy)
• Sentry — error tracking to diagnose bugs (privacy policy)

Cookies

We do not use tracking cookies or consent banners. The only cookie we set is a strictly necessary HTTP-only authentication token (JWT) when you log into your dashboard. No advertising, analytics, or third-party cookies are ever set.

Data retention

Your data is retained for as long as your account is active. When you delete your account, all associated data — including projects, media files, and analytics — is permanently removed. You can delete your account at any time from your dashboard settings.

Your rights

Under the GDPR, you have the right to:

• Access and download your personal data
• Rectify inaccurate data
• Request deletion of your data
• Request data portability
• Object to processing

To exercise any of these rights, contact us at hello@unfol.de.

Open source

The unfol.de codebase is open source. This means anyone can inspect exactly how your data is handled. However, user data on the hosted service is private and never shared publicly.