Privacy notice

Die verbindliche deutsche Fassung findest du hier.

1. Controller

Root Alpha UG (haftungsbeschränkt), Kervenheimer Weg 70, 47665 Sonsbeck, Deutschland
E-mail: hello@thrustify.de

2. Principle: as little as possible

• Public profile and product pages set no cookies and embed no tracking, no ad networks and no third-party fonts — which is why you see no cookie banner here.
• We store no order amounts. The database has no columns for shoppers' money.
• Reviewer e-mail addresses are never stored in plain text, only as an irreversible HMAC index used solely for duplicate detection.

3. Visiting the site

Our hosting provider processes technically necessary server logs (IP address, timestamp, URL, user agent) under Art. 6 (1) (f) GDPR for secure operation. Logs are deleted shortly after.

4. Writing a review

We process your rating and text, a display name in the form "First N." — never your full name — and your e-mail address as an HMAC index together with a reference to the invitation you used (proof that a real order existed). Legal basis: Art. 6 (1) (b) and (f) GDPR. Published reviews receive a checksum so later edits are provable.

5. Receiving an invitation

Shops using Thrustify pass us an e-mail address after an order so we can invite you once. We act as their processor under Art. 28 GDPR; the shop is the controller for that transfer. We send no reminders and use the address for nothing else.

6. Merchant accounts

For the dashboard we process your e-mail address, name, shop data and sign-in logs. Sign-in uses a one-time link instead of a password. Legal basis: Art. 6 (1) (b) GDPR.

7. Recipients

The application runs at Hostinger International Ltd. in Deutschland (EU). E-mail is sent from our own mail server on the same domain. No transfer to third countries takes place.

8. Retention

Published reviews stay visible while the shop maintains its profile — public information is their purpose. We remove your review on request. Account data is deleted after the contract ends, subject to statutory retention periods.

9. Your rights

You have the rights to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20) and objection (Art. 21 GDPR). Contact hello@thrustify.de. You may also lodge a complaint with a supervisory authority (Art. 77 GDPR).