Arswerk

Privacy policy

Last updated: 2026-09-28

Data controller

Zampaw S.R.L.S. (Arswerk brand), Loc. Nerbisci 56, 06024 Gubbio (PG), Italy — info@arswerk.it.

What data we process and why

  • Arswerk account: email, name (if you give it) and a password (if you set one), to manage your licenses and downloads. Starting a free trial, or getting a free plug-in, with your email creates this account for that email; you can sign in with a link we email you, or set a password. The password is only ever stored in hashed form by our authentication provider. During a free trial we email you what you need to use it (the download, the code) and when it is ending or has ended, with a way to buy. Legal basis: performance of the contract.
  • Purchases: name, email, billing address and order data; for businesses also company name, VAT number, tax code and SDI code. We need them to deliver the software and issue the license and invoice. Card data is collected directly by Stripe and never touches our systems. Legal basis: contract and legal obligations (tax and accounting).
  • Licenses and activations: license codes and a technical identifier of the computer you activate a plug-in or the Fretcraft app on, free trials included (the Fretcraft app sends only a one-way hash of it), to enforce the activation limit and to count a free trial’s 7 days from the day you actually start it. Legal basis: performance of the contract.
  • Download link by email: if you ask us to email you the download link, we use your address only to send that message — we don’t add you to any list. Legal basis: your request.
  • Newsletter (optional): we only write to you about new products and offers if you choose to, and confirm through the link we send you (double opt-in). You can unsubscribe at any time from your Account page or from the link in every email. Legal basis: consent, which you can withdraw.
  • Contact: if you write to us, we keep the correspondence to reply.
  • Visit statistics: we use Umami, installed on our own server in Germany. It uses no cookies and does not store your IP address: it records, in aggregate, the page visited, the referring site, the browser, operating system and device type, the country, and which main steps are used (for example starting a download or a trial), without linking them to you or your account. Legal basis: legitimate interest in knowing which pages are useful.
  • Technical logs: our host (Netlify) records technical data such as your IP address, needed to serve the site and protect it from abuse. Legal basis: legitimate interest.

Cookies

The site only uses technical tools: a session cookie to keep you signed in to your account, and browser storage to remember your language and not show you notices you already closed. No profiling cookies, no advertising trackers. Fonts are hosted on our own site, not by third-party services.

Videos

Some product pages include a demo video hosted on YouTube. The video is not loaded until you press “Watch the video”: only from that moment does Google’s player (in privacy-enhanced mode, youtube-nocookie.com) receive your IP address and possibly set its own cookies. If you don’t play the video, nothing is sent to Google.

Do you have to provide your data?

Email and password are needed to have an account; name, address and tax details are needed to complete a purchase and issue the invoice. Without them we can’t provide the service. Everything else (newsletter, download link by email) is optional. We make no automated decisions with legal effects on you and we don’t profile you.

Providers that process data on our behalf

  • Netlify, Inc. (USA) — website hosting.
  • Supabase, Inc. — accounts and authentication; data stored in the European Union (Ireland).
  • Neon, Inc. — license and order database; data stored in the European Union (Germany).
  • Stripe Payments Europe, Ltd. (Ireland) — payments.
  • Resend (USA) — sending emails (account verification, licenses, download links, newsletter).
  • Hetzner Online GmbH (Germany) — server for visit statistics.
  • Google (YouTube) — embedded videos.

Some of these providers are based in the United States or belong to US groups. Transfers outside the European Union rely on the Standard Contractual Clauses approved by the European Commission and, where applicable, the EU-U.S. Data Privacy Framework. We never sell your data and never use it to train AI — period.

How long we keep it

  • Account: for as long as it is active. You can close it at any time from your Account page.
  • Orders, invoices and licenses: 10 years, as Italian law requires. If you close your account, we keep the link between your email and the licenses you bought, so we can give them back if you open a new account.
  • Newsletter: until you unsubscribe.
  • Statistics: only in aggregate, with nothing that identifies you.

Your rights

You can request access, rectification, erasure, restriction and portability of your data, object to processing based on legitimate interest, and withdraw consent at any time. You can also download a copy of your data from your Account page. For anything else, write to info@arswerk.it. You also have the right to lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it).

Zampaw S.R.L.S. · Loc. Nerbisci 56, 06024 Gubbio (PG), Italia · P.IVA 03978970543 · REA PG-369454 · info@arswerk.it