Privacy policy

Last updated: 3 November 2026

1. Who is responsible

The controller responsible for this website under the EU General Data Protection Regulation (GDPR) is:

Frikke GmbH
Flottwellstraße 42
10785 Berlin, Germany
jakobfricke@gmail.com
Managing director: Jakob Fricke

Write to that address with any question about your data or to exercise any of the rights in section 12.

2. Summary

• You can use every free paper on this site without an account and without giving us your name or email.
• We log each download together with the paper settings, as statistics. We never store your IP address in plain text; we store a one-way hash of it.
• We show Google ads. In the EEA, the UK and Switzerland, Google asks for your consent first and shows only non-personalised ads if you decline.
• We use Google Analytics to count visits.
• An account, a purchase or an email reminder only exists if you ask for one, and then we store your email address.

3. Hosting and server logs

The site runs on Heroku (Salesforce, Inc., USA). To deliver a page, the hosting servers necessarily receive your IP address, the requested address, the time, your browser's user agent and the referring page. These logs are kept only briefly, for operation and security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in running a secure website).

4. Generating and downloading paper

When you download a PDF or PNG, we record which paper and settings you chose, the page language, the time, your browser's user agent, the country named in your browser's language setting (for example "es-MX"), and two hashes: a SHA-256 hash of your IP address, and a SHA-256 hash of your IP address combined with your user agent. We do not look up your location from your IP address.

We use this to count downloads, to see which settings people choose so that we can improve the defaults, and to filter automated traffic out of those statistics. The hashes are pseudonymous, not anonymous: we do not use them to identify anyone. The records are kept for as long as we need them for these statistics. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the service and protecting it from abuse).

5. Feedback and short surveys

After a download we sometimes ask a short question. If you answer, we store your answer, the paper and language, and the same two hashes described in section 4. We send the text of written answers, without any identifier, to Anthropic PBC (USA) through its API, to translate and categorise it so that we can read feedback in all nine of our languages. Anthropic does not use API data to train its models. Your browser keeps a few entries in local storage so that we do not ask you the same question twice (see section 10). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding and improving the product).

6. Account, saved settings and email reminders (optional)

If you save a paper setup, sign in or ask for a paper to be emailed to you, we store your email address, your language, when you signed in, the campaign that brought you here (if any), your saved paper settings and how often you want them emailed. Sign-in works with a one-time link sent by email; there is no password. Emails are delivered by Postmark (ActiveCampaign, LLC, USA). We only send you news if you ticked the box for it, and you can withdraw that consent at any time. Legal basis: Art. 6(1)(b) GDPR (providing the service you asked for), and Art. 6(1)(a) GDPR for news. We keep the data until you delete your account or ask us to delete it.

7. Purchases

Payments are processed by Stripe Payments Europe, Ltd. (Ireland). We never see or store your card details. We store your email address, what you bought, the amount, and Stripe's reference numbers, so that we can deliver the download and answer questions about the order. Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (tax law). German tax law requires us to keep order records for up to ten years. Stripe's privacy policy

8. Advertising: Google AdSense

The site is funded by ads from Google AdSense (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google and its advertising partners may use cookies and similar technologies to show ads, to limit how often you see an ad, to measure performance and, with your consent, to personalise ads.

If you visit from the EEA, the UK or Switzerland, Google's consent message asks for your choice before any of this happens. It is a certified consent platform under the IAB Transparency and Consent Framework. If you decline, Google may still show non-personalised ads, which use cookies only for purposes such as frequency capping, fraud prevention and ad measurement where the law allows. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (your consent).

Change your privacy and cookie settings

More information: How Google uses data from sites that use its services · Google ad settings

9. Analytics: Google Analytics 4

We use Google Analytics 4 (Google Ireland Limited) to count visits and see which pages are useful. Google Analytics sets cookies and processes information such as the pages you view, your device and browser, an approximate location derived from your IP address, and how you reached the site. IP addresses are not logged or stored by Google Analytics 4. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (your consent, given through the consent message described in section 8). Google's privacy policy

10. Cookies and local storage

These are the entries this site itself stores in your browser:

• _generatedpaper_session – session cookie: keeps you signed in and remembers which link brought you here. It is deleted when you close the browser.
• unit_preference – cookie: whether you prefer centimetres or inches. Kept for one year.
• gp_… – local storage entries: which survey questions you have already seen or answered, and your last download so that we can offer it again. They stay on your device until you clear your browser data.

These are strictly necessary for features you use (§ 25(2) TDDDG). Google's cookies are described in sections 8 and 9.

11. Error monitoring

When the site fails with an error, a report is sent to Bugsnag (SmartBear Software, Inc., USA). It can contain the requested address, your browser and your IP address. We use it only to find and fix bugs. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a working website).

12. Transfers outside the EU

Several of the providers above are based in the USA or process data there. Transfers rely on the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's Standard Contractual Clauses.

13. Your rights

You have the right to:

• access the personal data we hold about you (Art. 15 GDPR),
• have it corrected (Art. 16) or deleted (Art. 17),
• restrict its processing (Art. 18),
• receive it in a portable format (Art. 20),
• object to processing based on our legitimate interest (Art. 21),
• withdraw any consent at any time, without affecting what happened before (Art. 7(3)).

Email jakobfricke@gmail.com to use any of these rights. You can also complain to a data protection authority. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.

14. Changes

We update this policy when the site changes how it handles data. The date at the top shows the latest version.