Privacy Policy

This policy explains how we process personal data when you use this website and purchase or access our digital products. We're currently in beta; practices may evolve as we introduce new features.

Controller

The controller responsible for data processing on this website is:
Joanna Liu
Donau-City-Straße 3, 1220 Wien
Email: joanna@shishiishi.com

What we collect

• Contact and purchase-related data: such as email address and transaction-related information needed to provide access to your digital product and support you (e.g., purchase status, timestamps, receipts/invoice references).
• Support communications: content you send when contacting us (and our replies).
• Usage and technical data: basic logs and device or browser information needed to operate the site, fix errors, and protect against abuse (e.g., approximate device information, timestamps, and diagnostic data).
• Cookie and consent data: your cookie preferences (e.g., whether you allow analytics).

Purposes and legal bases

We process personal data for the following purposes and legal bases (GDPR Art. 6):

• Provide digital products and support (performance of a contract, Art. 6(1)(b)).
• Operate, secure, and debug the site (legitimate interests, Art. 6(1)(f)).
• Analytics (optional) to understand usage and improve the product (consent, Art. 6(1)(a), where enabled).
• Legal obligations (Art. 6(1)(c)), for example where retention is required by applicable law.

Payment processing & sales (Merchant of Record)

Purchases are processed via Lemon Squeezy LLC as Merchant of Record. Lemon Squeezy LLC is the contractual seller for checkout transactions and processes personal data as needed to handle payments, EU VAT (where applicable), invoicing, and refunds.

Sharing and recipients

We use the following providers to operate the Service (as applicable):

• Lemon Squeezy LLC (Merchant of Record): payment processing, invoicing, EU VAT (where applicable), refunds.
• Supabase: authentication (including magic-link/OTP), database and storage for Service functionality and (if enabled) analytics events.
• Google (OAuth, if used): sign-in via Google account through Supabase Auth.
• Resend: delivery of emails sent through our contact form.
• Hosting/CDN provider: hosting and delivery of this website and its assets.

We may disclose information where required by law, to protect rights and safety, or in connection with a business transfer (with appropriate notice where required).

Retention

We keep information only as long as needed for the purposes above, unless a longer period is required by law. Typical examples include keeping support communications for handling your request and keeping transaction-related information as needed for accounting and dispute handling.

Your rights

Under the GDPR, you may have rights to access, rectification, erasure, restriction, data portability, and to object to certain processing. Where processing is based on consent, you can withdraw consent at any time with effect for the future (for example via Cookie settings).

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement. In Austria, this is the Datenschutzbehörde.

International transfers

Some of our providers may process personal data outside the EEA/your country (for example in the United States). Where required, we rely on appropriate safeguards (such as standard contractual clauses) and additional measures as applicable.

In particular, Lemon Squeezy LLC is based in the United States. Other providers (such as Resend, Google, Supabase, and our hosting/CDN provider) may also process data in multiple regions depending on configuration and delivery.

Children

NoCrastination is not directed at children under 16. We do not knowingly collect their personal information.

Contact

For privacy questions or requests, contact us at joanna@shishiishi.com. We will update this page when our practices change in a material way.