1. Introduction

A MackProjekt ("we," "our," or "us") operates mackprojekt.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site and use our services.

2. Information We Collect

3. How We Use Your Information

We use collected information for:

• Service Delivery: To operate, maintain, and improve our Site and services
• Communication: To respond to inquiries, send notifications about your account
• Analytics: To understand user behavior, optimize user experience, and measure campaign effectiveness
• Security: To detect, prevent, and address technical issues and fraud
• Legal Compliance: To comply with applicable laws and regulations
• Marketing: To send promotional materials (only with your consent)

4. Cookies and Tracking Technologies

5. Third-Party Data Sharing

We share information with the following third parties:

• Google LLC: Analytics data is processed by Google Analytics 4 and Google Tag Manager. Google may associate this data with your Google account if you're signed in. See Google's Privacy Policy and opt-out options.
• Microsoft Azure: Data is stored and processed on Azure infrastructure (Cosmos DB, Azure Functions, Azure Communication Services) in the United States. Microsoft complies with GDPR and data protection frameworks.
• Service Providers: We may share data with trusted vendors who perform services on our behalf (email delivery, hosting, security).

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Security

We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Bcrypt password hashing with salt rounds
• JWT-based authentication with secure token storage
• Rate limiting and DDoS protection
• Regular security audits and updates
• Access controls and logging

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

• User Accounts: Retained until account deletion is requested
• Contact Form Submissions: Retained for 2 years or until resolution
• Analytics Data: Google Analytics retains data for 2 months (default setting)
• Session Data: Expired JWT tokens are retained for 7 days for security audits

8. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Request data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications or disable cookies
• Object: Object to data processing for direct marketing purposes
• Restrict: Request restriction of processing in certain circumstances

To exercise these rights, contact us at privacy@mackprojekt.com or ampstudio@mackprojekt.com.

9. Children's Privacy

Our Site is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Privacy Shield Framework compliance (where applicable)
• Adequacy decisions by regulatory authorities

11. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Know what personal information is collected, used, and shared
• Delete personal information held by businesses
• Opt-out of sale of personal information (we do not sell data)
• Non-discrimination for exercising CCPA rights

To submit a CCPA request, email privacy@mackprojekt.com with "CCPA Request" in the subject line.

12. GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), we process your data under the following lawful bases:

• Consent: You have given clear consent for us to process your data (e.g., analytics cookies)
• Contract: Processing is necessary to fulfill our contract with you (e.g., user accounts)
• Legal Obligation: Processing is required by law (e.g., tax records)
• Legitimate Interest: Processing is necessary for our legitimate business interests (e.g., security, fraud prevention)

You have the right to lodge a complaint with your local data protection authority.

13. Do Not Track Signals

Some browsers support "Do Not Track" (DNT) signals. Because there is no industry standard for DNT, our Site does not currently respond to DNT signals. However, you can control tracking through our cookie consent banner.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of our Site after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us: