Legal
Privacy
Short version: the software does not send us anything, and the only personal data we hold is the name and email address attached to a purchase — kept so we can re-send your licence if you lose it. This website measures visits with Google Analytics only if you agree to it, and plays a video from YouTube only when you press play on it.
Who is responsible for your data
The controller, in the language of the GDPR, is ITFanatic - Inhaber: Balazs Csaba Lendvay, Lessingstr. 3a, 65468 Trebur, Germany — the sole trader named in the Impressum. Write to support@itfanatic.com about anything on this page.
What changed on 25 October 2026
Paddle’s checkout opens on our PayPal page. Paying through
Paddle (the PayPal option) is now offered. Its checkout opens on our page
/image-organizer/checkout-paypal — and nothing loads from Paddle
until you press the button there. Paddle’s checkout
on our PayPal page explains what Paddle receives when you do. Paying through
Stripe is unchanged.
The software itself collects nothing
PrivacyFirst Photo Organizer runs entirely on your computer. It has no analytics, no telemetry, no crash reporting, and no update check. Your photos, their contents, and the tags it generates never leave your machine, and we have no way to see them. After you install your licence the application does not contact us again.
What we hold, and why
| Data | Why | Basis |
|---|---|---|
| Your name and email address | They are written into your licence file, and we need them to issue it and to re-send it if you lose it | Performance of our contract with you |
| Order reference and purchase date | Linking a support request to a real purchase; accounting | Contract, and our legal record-keeping duties |
| How you use this website — pages viewed, the site you came from, browser and device type, approximate location, a cookie identifier | Counting visits and seeing which pages are read, through Google Analytics — only if you accept it | Your consent, which you can withdraw at any time |
We do not hold your address or any payment details. We never see your card number.
Paying through Paddle. If you pay through Paddle (the PayPal option), you enter your details at Paddle’s checkout, not with us. Paddle’s checkout asks for your email address, and not always your name. After the payment we read your email address, and your name if Paddle holds one, back from Paddle — with a key that can only read Paddle’s customer records — and use them exactly as above, to issue and deliver your licence. If Paddle holds no name for you, your email address is written into the licence in its place. The order reference we keep is Paddle’s.
Bought through an app store? The Microsoft Store and the Mac App Store sell the app themselves and do not pass us your name, your email address or any payment details, so we hold none of the above about you unless you write to us. The store's own privacy policy covers the purchase.
Giving us a name and an email address is necessary to buy: without them no personalised licence can be generated or delivered. It is a contractual requirement rather than a legal one — you are free not to buy. There is no automated decision-making or profiling of any kind; we build no user profiles and score nobody.
How long we keep it
We keep purchase records for as long as we sell the product, with no automatic expiry. The reason is specific and is the reason the data exists: “I have lost my licence file” is the most common thing anyone asks us, and we can only answer it if we can still find your purchase. A record we deleted on a timer would be a customer we can no longer help.
Tax law separately obliges us to keep order-linked records for a number of years; that is a minimum we must observe, not a date on which we delete things.
Website analytics, if you accepted it, is kept by Google for 2 months and then deleted. Its cookies expire after at most 13 months, and your answer to the banner is remembered for 12 months before we ask again.
Asking us to delete your data
Email support@itfanatic.com and we will erase your name and email address from our records and delete your stored licence file. We will confirm when it is done.
Two things to know before you ask
It cannot be undone, and it ends our ability to support you. Your name and email are inside the signed licence itself, so once they are erased we cannot regenerate or re-send your licence. If you later lose the file, we will not be able to help — we will no longer have any way to know you bought it.
Software you have already installed keeps working. Your licence is an offline file on your own computer. We have no mechanism to reach into it or switch it off, and deleting our records does not change that. We would rather say so plainly than imply a recall we cannot perform.
Backups
We keep encrypted backups of our records so a mistake on our side cannot lose your purchase. Backups are kept for 12 weeks and then permanently deleted, so if you ask us to erase your data it disappears from live systems immediately and from every backup within that window. We do not edit historical backups; we let them expire.
Who else processes your data
| Who | What they do | What they get |
|---|---|---|
| Stripe | Takes the payment and is the seller of record. They handle VAT and hold the payment details we never see. Stripe decides for itself how it uses that data, so it answers for it under its own policy rather than acting on our instructions. | Everything you enter at checkout |
| Paddle | Takes the payment and is the Merchant of Record for orders paid through its checkout (the PayPal option) — Paddle.com Market Limited, London (Paddle.com Inc. in the United States, Paddle.com (Canada) Ltd. in Canada). They handle VAT and hold the payment details we never see, and decide for themselves how they use that data, under their own policy. We read your email address and name back from Paddle to issue your licence | Everything you enter at Paddle’s checkout; and, once you press the button on our PayPal page, your IP address and browser details (how) |
| Resend | Sends the email carrying your licence | Your name, email address, and the licence file |
| Cloudflare | Hosts this site, our records, and the downloads | Your purchase record; standard server logs when you visit; our daily counts of which websites send visitors (no personal data) |
| Measures visits to this website — only if you accept analytics. Google Ireland Limited acts on our instructions under a data processing agreement | Pages you view, a cookie identifier, browser and device details, approximate location | |
| YouTube | Plays a video from our video guide — only when you press play on it. Google Ireland Limited decides for itself what YouTube does with the data, under its own policy, rather than acting on our instructions | Your IP address, browser and device details, which video you play and that it is on this site; possibly cookies or similar data on your device |
Our records are stored in the European Union. Some of the providers above are US companies and may process data outside the EU under standard contractual clauses or the EU-US Data Privacy Framework, under which Google LLC is certified. Paddle.com Market Limited is in the United Kingdom, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR, renewed in December 2025 until 2031).
This site
Unless you agree to analytics or press play on a video, nothing on this site loads from anyone else's server and nothing is stored on your device — no embedded fonts, no third-party scripts, no tracking. On your first visit a banner asks whether we may use Google Analytics; Accept and Reject are equally easy, and nothing from Google loads until you press Accept.
If you accept, Google Analytics sets two cookies and records which pages you view, the site you came from, your browser and device type, and an approximate location. Google states that it does not store IP addresses in Google Analytics 4. We have switched off Google signals and every advertising feature, the data is deleted after 2 months, and it never runs on the page shown after you pay. The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Withdraw it at any time with Cookie settings at the foot of every page; the details are on the cookies page.
Where visits come from
When you open a product page such as
PrivacyFirst Photo Organizer, our server reads the
address of the page you came from, which your browser sends with the request, and adds
one to a count for that day under the name of the referring website —
for example bing.com or reddit.com — or under "none" if your
browser sent nothing. The count keeps only the date, the product, that website's name and
the number. It does not keep your IP address, the full address of the page you came from,
your browser details, or anything that tells one visitor from another; like every
request, the visit also appears briefly in our host's ordinary server logs (below).
Requests that
identify themselves as automated, such as scripts and search-engine crawlers, are not
counted.
Nothing is stored on or read from your device, so there is no cookie and nothing to consent to. The purpose is to learn which channels — search, advertising, the forums we post in — actually bring people, so that we only pay for what works. The legal basis is our legitimate interest in that (Art. 6(1)(f) GDPR). Because only daily totals of website names are kept, nothing in them can be traced back to you. The counts are stored with our other records at Cloudflare in the EU, for as long as they are useful for that purpose.
Videos from YouTube
The video guide shows each video as a still
image served from this site. Nothing is loaded from YouTube until you press
play on a video, and the page says so next to the videos. When you press
play, that one video's player loads from youtube-nocookie.com, YouTube's
privacy-enhanced mode, provided by Google Ireland Limited, Gordon House, Barrow
Street, Dublin 4, Ireland. YouTube then receives your IP address, details of your
browser and device, which video you play and that it is embedded on this site, and it
may store cookies or similar data on your device. From that moment Google decides
what YouTube does with the data, under
its own privacy policy. We receive
nothing back.
The legal basis is your consent, given by pressing play (Art. 6(1)(a) GDPR, and § 25(1) TDDDG for anything stored on or read from your device). We remember nothing about it: every video asks again by being pressed, and you withdraw by not pressing another. What YouTube has already stored belongs to its own domain, which we cannot reach; your browser's settings can delete it. Google may process the data in the United States; Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of 10 July 2023).
Paddle’s checkout on our PayPal page
If you choose to pay through Paddle (the PayPal option), you reach our page
/image-organizer/checkout-paypal. Nothing is loaded from Paddle
until you press its button, and the page says so next to it. Pressing it
loads Paddle’s checkout script from cdn.paddle.com and opens
Paddle’s checkout over the page, provided by Paddle.com Market Limited, 30 Old
Bailey, London EC4M 7AU, United Kingdom. Paddle then receives your IP address and
details of your browser and device, and may store data in your browser for the
checkout and to prevent fraud. Everything you enter in that checkout goes to Paddle,
not to us; Paddle decides how it uses that data, under
its own privacy notice. Paddle’s
checkout may in turn load services of the payment methods it offers, such as PayPal or
Google Pay, under their own terms.
Paying through Paddle says what we receive back after a payment.
Loading the checkout is strictly necessary to provide the service you asked for by pressing the button: the legal basis is taking steps towards a contract at your request (Art. 6(1)(b) GDPR), and anything Paddle stores on or reads from your device is exempt from consent for the same reason (§ 25(2) no. 2 TDDDG). It happens on no other page of this site. The United Kingdom has an EU adequacy decision.
Our host keeps ordinary server logs, which include IP addresses, for a short period for security and abuse prevention. That rests on our legitimate interest in running the site safely, and those logs are never joined up with your purchase.
Your rights
Under the GDPR you can ask us to:
- Give you a copy of the data we hold about you
- Correct anything that is wrong
- Delete it — see the section above on what that costs you
- Restrict how we process it
- Hand it over in a common, machine-readable format, or send it to someone else
- Stop processing that rests on our legitimate interests, on grounds relating to your particular situation
An email to support@itfanatic.com is enough for any of these — a real person reads it, and it costs you nothing. Where we have asked for consent you may withdraw it at any time, with effect for the future — for analytics, with Cookie settings at the foot of every page; for a video, by not pressing play on another.
You can also complain to a data protection authority: the one where you live, where you work, or where you think something went wrong. Ours is the authority for the German state named in the Impressum; the full list of German authorities is published by the federal commissioner. We would rather you told us first, but it is your right either way.
Changes
If this policy changes materially we will update the date at the top. We will not retroactively widen how we use data you have already given us.